Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-6749 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6747 | Use-after-free in the WebRTC component | 7.5 High | Apr 21, 2026 |
| CVE-2026-6748 | Uninitialized memory in the Audio/Video: Web Codecs component | 9.8 Critical | Apr 21, 2026 |
| CVE-2026-6746 | Use-after-free in the DOM: Core & HTML component | 7.5 High | Apr 21, 2026 |
| CVE-2026-40244 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for… | 8.4 High | Apr 21, 2026 |
| CVE-2026-33557 | A possible security vulnerability has been identified in Apache Kafka | Not rated | Apr 20, 2026 |
| CVE-2026-6654 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate | 5.1 Medium | Apr 20, 2026 |
| CVE-2026-41242 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 9.4 Critical | Apr 18, 2026 |
| CVE-2026-6507 | Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing | 7.5 High | Apr 17, 2026 |
| CVE-2026-40170 | ngtcp2 is a C implementation of the IETF QUIC protocol | 7.5 High | Apr 16, 2026 |
| CVE-2025-54502 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… | 7.1 High | Apr 16, 2026 |
| CVE-2026-41035 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a… | 7.4 High | Apr 16, 2026 |
| CVE-2026-40192 | Pillow is a Python imaging library | 8.7 High | Apr 15, 2026 |
| CVE-2026-6384 | Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing | 7.3 High | Apr 15, 2026 |
| CVE-2026-40919 | Gimp: gimp: denial of service via specially crafted seattle filmworks file | 6.1 Medium | Apr 15, 2026 |
| CVE-2026-40918 | Gimp: gimp: denial of service via crafted pvr image file | 5.5 Medium | Apr 15, 2026 |
| CVE-2026-40917 | Gimp: gimp: application crashes or information disclosure via crafted icns image files | 5.0 Medium | Apr 15, 2026 |
| CVE-2026-40916 | Gimp: gimp: denial of service due to stack buffer overflow in tim image loader | 5.0 Medium | Apr 15, 2026 |
| CVE-2026-40915 | Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader | 5.5 Medium | Apr 15, 2026 |
| CVE-2026-6245 | Sssd: out-of-bounds read in the sssd | 5.5 Medium | Apr 15, 2026 |
| CVE-2026-5588 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc | 6.3 Medium | Apr 15, 2026 |
| CVE-2026-5598 | Covert timing channel vulnerability in Legion of the Bouncy Castle Inc | 8.9 High | Apr 15, 2026 |
| CVE-2026-0636 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the… | 5.5 Medium | Apr 15, 2026 |
| CVE-2025-14813 | : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc | 9.3 Critical | Apr 15, 2026 |
| CVE-2026-33414 | Podman is a tool for managing OCI containers and pods | 4.0 Medium | Apr 14, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430