Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-32203 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network | 7.5 High | Apr 14, 2026 |
| CVE-2026-26171 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network | 7.5 High | Apr 14, 2026 |
| CVE-2026-23666 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network | 7.5 High | Apr 14, 2026 |
| CVE-2026-33116 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized… | 7.5 High | Apr 14, 2026 |
| CVE-2026-32178 | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network | 7.5 High | Apr 14, 2026 |
| CVE-2026-40164 | jq is a command-line JSON processor | 7.5 High | Apr 13, 2026 |
| CVE-2026-39979 | jq is a command-line JSON processor | 6.9 Medium | Apr 13, 2026 |
| CVE-2026-4786 | Mitgation of CVE-2026-4519 was incomplete | 7.0 High | Apr 13, 2026 |
| CVE-2026-6100 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… | 9.1 Critical | Apr 13, 2026 |
| CVE-2026-28291 | simple-git enables running native Git commands from JavaScript | 8.1 High | Apr 13, 2026 |
| CVE-2026-31419 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in… | 7.8 High | Apr 13, 2026 |
| CVE-2026-32146 | Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system… | 8.3 High | Apr 11, 2026 |
| CVE-2026-4154 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4153 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4152 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4151 | GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-4150 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 High | Apr 11, 2026 |
| CVE-2026-40175 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Medium | Apr 10, 2026 |
| CVE-2026-39304 | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ | Not rated | Apr 10, 2026 |
| CVE-2026-34486 | Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | Not rated | Apr 9, 2026 |
| CVE-2026-29146 | Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration | Not rated | Apr 9, 2026 |
| CVE-2026-1584 | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder | 7.5 High | Apr 9, 2026 |
| CVE-2026-4878 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | 6.7 Medium | Apr 9, 2026 |
| CVE-2025-62718 | Axios is a promise based HTTP client for the browser and Node.js | 6.3 Medium | Apr 9, 2026 |
| CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | 6.9 Medium | Apr 8, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430