Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-54228 | Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories | 7.8 High | Jun 13, 2026 |
| CVE-2026-12143 | form-data is a library for creating readable multipart/form-data streams | 8.7 High | Jun 12, 2026 |
| CVE-2026-48165 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-48163 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-44173 | MariaDB server is a community developed fork of MySQL server | 5.0 Medium | Jun 12, 2026 |
| CVE-2026-44172 | MariaDB server is a community developed fork of MySQL server | 6.9 Medium | Jun 12, 2026 |
| CVE-2026-44168 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-44170 | MariaDB server is a community developed fork of MySQL server | 6.3 Medium | Jun 12, 2026 |
| CVE-2026-48914 | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | 6.7 Medium | Jun 12, 2026 |
| CVE-2026-52860 | Vim is an open source, command line text editor | 7.5 High | Jun 11, 2026 |
| CVE-2026-47162 | Vim is an open source, command line text editor | 7.3 High | Jun 11, 2026 |
| CVE-2026-53702 | Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser | 6.5 Medium | Jun 11, 2026 |
| CVE-2026-53701 | Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser | 6.5 Medium | Jun 11, 2026 |
| CVE-2026-11774 | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow | 7.6 High | Jun 11, 2026 |
| CVE-2026-49261 | MariaDB server is a community developed fork of MySQL server | 10.0 Critical | Jun 11, 2026 |
| CVE-2026-44486 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 High | Jun 11, 2026 |
| CVE-2026-44487 | Axios is a promise based HTTP client for the browser and Node.js | 8.2 High | Jun 11, 2026 |
| CVE-2026-44488 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 High | Jun 11, 2026 |
| CVE-2026-44496 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 High | Jun 11, 2026 |
| CVE-2026-44495 | Axios is a promise based HTTP client for the browser and Node.js | 7.0 High | Jun 11, 2026 |
| CVE-2026-44494 | Axios is a promise based HTTP client for the browser and Node.js | 8.7 High | Jun 11, 2026 |
| CVE-2026-44492 | Axios is a promise based HTTP client for the browser and Node.js | 8.6 High | Jun 11, 2026 |
| CVE-2026-11850 | Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read | 5.0 Medium | Jun 11, 2026 |
| CVE-2026-2049 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Jun 10, 2026 |
| CVE-2026-46625 | JavaScript Cookie is a JavaScript API for handling cookies, client-side | 7.5 High | Jun 10, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430