Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34355	A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend	Not rated	Jun 8, 2026
CVE-2026-3238	A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller	7.5 High	Jun 8, 2026
CVE-2026-50263	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()	5.5 Medium	Jun 5, 2026
CVE-2026-50262	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes	5.5 Medium	Jun 5, 2026
CVE-2026-50264	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat	7.8 High	Jun 5, 2026
CVE-2026-50261	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()	7.8 High	Jun 5, 2026
CVE-2026-50260	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()	7.8 High	Jun 5, 2026
CVE-2026-50258	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels	7.8 High	Jun 5, 2026
CVE-2026-50259	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing	7.8 High	Jun 5, 2026
CVE-2026-50256	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch	7.8 High	Jun 5, 2026
CVE-2026-50257	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()	7.8 High	Jun 5, 2026
CVE-2026-50265	A flaw was found in libinput	7.0 High	Jun 5, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-10732	All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when…	6.4 Medium	Jun 5, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2026-46244	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In…	9.1 Critical	Jun 3, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-10702	JIT miscompilation in the JavaScript Engine: JIT component	4.3 Medium	Jun 2, 2026
CVE-2026-10701	Incorrect boundary conditions in the Graphics: Text component	7.5 High	Jun 2, 2026
CVE-2026-5419	Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal	3.7 Low	Jun 1, 2026
CVE-2026-43958	Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service	7.8 High	Jun 1, 2026
CVE-2026-46243	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…	7.1 High	Jun 1, 2026
CVE-2026-10118	Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication	7.8 High	Jun 1, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-46385	iskorotkov/avro is a fast Go Avro codec	8.7 High	May 29, 2026

Other Red Hat products