Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-13763	Libopensc: opensc: multiple uses of uninitialized variable	5.7 Medium	Apr 23, 2026
CVE-2026-31488	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode…	7.8 High	Apr 22, 2026
CVE-2026-31474	In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in…	7.8 High	Apr 22, 2026
CVE-2026-6862	Efivar: efivar: denial of service due to stack overflow in device path node parsing	5.5 Medium	Apr 22, 2026
CVE-2026-6861	Emacs: emacs: memory corruption vulnerability when processing svg css	6.1 Medium	Apr 22, 2026
CVE-2026-41651	PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…	8.8 High	Apr 22, 2026
CVE-2026-6846	Binutils: binutils: arbitrary code execution via malformed xcoff object file processing	7.8 High	Apr 22, 2026
CVE-2026-6844	Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files	5.5 Medium	Apr 22, 2026
CVE-2026-6843	Nano: nano: format string vulnerability leads to denial of service	5.5 Medium	Apr 22, 2026
CVE-2026-31431	Exploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	7.8 High	Apr 22, 2026
CVE-2026-6845	Binutils: binutils: denial of service via crafted elf file	5.0 Medium	Apr 22, 2026
CVE-2026-6842	Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions	2.5 Low	Apr 22, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2026-34282	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-40372	Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges…	9.1 Critical	Apr 21, 2026
CVE-2026-6786	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6784	Memory safety bugs present in Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6785	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and…	7.5 High	Apr 21, 2026
CVE-2026-6754	Use-after-free in the JavaScript Engine component	7.5 High	Apr 21, 2026
CVE-2026-6752	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026

Other Red Hat products