Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-4720 | Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4729 | Memory safety bugs present in Firefox 148 and Thunderbird 148 | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4699 | Incorrect boundary conditions in the Layout: Text and Fonts component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4700 | Mitigation bypass in the Networking: HTTP component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4697 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4698 | JIT miscompilation in the JavaScript Engine: JIT component | 8.8 High | Mar 24, 2026 |
| CVE-2026-4695 | Incorrect boundary conditions in the Audio/Video: Web Codecs component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4696 | Use-after-free in the Layout: Text and Fonts component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4693 | Incorrect boundary conditions in the Audio/Video: Playback component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4694 | Incorrect boundary conditions, integer overflow in the Graphics component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4691 | Use-after-free in the CSS Parsing and Computation component | 9.8 Critical | Mar 24, 2026 |
| CVE-2026-4692 | Sandbox escape in the Responsive Design Mode component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4689 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 10.0 Critical | Mar 24, 2026 |
| CVE-2026-4690 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4687 | Sandbox escape due to incorrect boundary conditions in the Telemetry component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4688 | Sandbox escape due to use-after-free in the Disability Access APIs component | 9.6 Critical | Mar 24, 2026 |
| CVE-2026-4685 | Incorrect boundary conditions in the Graphics: Canvas2D component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4686 | Incorrect boundary conditions in the Graphics: Canvas2D component | 7.5 High | Mar 24, 2026 |
| CVE-2026-4684 | Race condition, use-after-free in the Graphics: WebRender component | 7.5 High | Mar 24, 2026 |
| CVE-2026-3260 | A flaw was found in Undertow | 5.9 Medium | Mar 24, 2026 |
| CVE-2026-1940 | Gstreamer: incomplete fix of cve-2026-1940 | 5.1 Medium | Mar 23, 2026 |
| CVE-2026-4647 | Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library | 6.1 Medium | Mar 23, 2026 |
| CVE-2026-33228 | flatted is a circular JSON parser | 8.9 High | Mar 20, 2026 |
| CVE-2026-33210 | Ruby JSON is a JSON implementation for Ruby | 8.3 High | Mar 20, 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critical | Mar 20, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430