Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-8093	Memory safety bugs present in Thunderbird 150.0.1	8.1 High	May 7, 2026
CVE-2026-8092	Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1	8.1 High	May 7, 2026
CVE-2026-8091	Incorrect boundary conditions in the Audio/Video: Playback component	9.8 Critical	May 7, 2026
CVE-2026-8090	Use-after-free in the DOM: Networking component	7.3 High	May 7, 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 High	May 7, 2026
CVE-2026-41139	Math.js is an extensive math library for JavaScript and Node.js	8.8 High	May 7, 2026
CVE-2026-42216	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.8 High	May 7, 2026
CVE-2026-41142	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.8 High	May 7, 2026
CVE-2026-40981	When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the…	7.5 High	May 7, 2026
CVE-2026-41675	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-40982	Spring Cloud Config allows applications to serve arbitrary text and binary files through the…	9.1 Critical	May 7, 2026
CVE-2026-41673	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-41672	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43178	In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in…	7.8 High	May 6, 2026
CVE-2026-43133	In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE…	7.9 High	May 6, 2026
CVE-2026-43125	In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The…	9.8 Critical	May 6, 2026
CVE-2026-43114	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return…	9.4 Critical	May 6, 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 High	May 6, 2026
CVE-2026-28780	Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server	Not rated	May 5, 2026
CVE-2026-25243	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-23631	Redis is an in-memory data structure store	6.1 Medium	May 5, 2026
CVE-2026-23479	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-34002	Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling	6.1 Medium	May 5, 2026
CVE-2026-34000	Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.	6.1 Medium	May 5, 2026

Other Red Hat products