Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2922	GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2920	GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-31806	FreeRDP is a free implementation of the Remote Desktop Protocol	9.3 Critical	Mar 13, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Medium	Mar 13, 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 High	Mar 12, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-3099	Libsoup: libsoup: authentication bypass via digest authentication replay attack	5.8 Medium	Mar 12, 2026
CVE-2023-43010	The issue was addressed with improved memory handling	8.8 High	Mar 12, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026
CVE-2026-23868	Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect…	5.1 Medium	Mar 10, 2026
CVE-2026-28292	`simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0…	9.8 Critical	Mar 10, 2026
CVE-2026-26130	Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…	7.5 High	Mar 10, 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 High	Mar 7, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 High	Mar 6, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2026-29062	jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data…	8.7 High	Mar 6, 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 High	Mar 5, 2026
CVE-2025-69534	Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser…	7.5 High	Mar 5, 2026

Other Red Hat products