Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-12801	Nfs-utils: rpc.mountd in the nfs-utils privilege escalation	6.5 Medium	Mar 4, 2026
CVE-2026-27622	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Mar 3, 2026
CVE-2026-3304	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-2359	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-28364	In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables…	7.9 High	Feb 27, 2026
CVE-2026-28295	Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses	4.3 Medium	Feb 26, 2026
CVE-2026-28296	Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths	4.3 Medium	Feb 26, 2026
CVE-2026-27970	Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other…	7.6 High	Feb 26, 2026
CVE-2026-26965	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-26955	FreeRDP is a free implementation of the Remote Desktop Protocol	8.8 High	Feb 25, 2026
CVE-2026-26104	Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api	5.5 Medium	Feb 25, 2026
CVE-2026-26103	Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api	7.1 High	Feb 25, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026
CVE-2026-2807	Memory safety bugs present in Firefox 147 and Thunderbird 147	9.8 Critical	Feb 24, 2026
CVE-2026-2798	Use-after-free in the DOM: Core & HTML component	8.8 High	Feb 24, 2026
CVE-2026-2799	Use-after-free in the DOM: Core & HTML component	8.8 High	Feb 24, 2026
CVE-2026-2797	Use-after-free in the JavaScript: GC component	8.8 High	Feb 24, 2026
CVE-2026-2795	Use-after-free in the JavaScript: GC component	8.8 High	Feb 24, 2026
CVE-2026-2796	JIT miscompilation in the JavaScript: WebAssembly component	9.8 Critical	Feb 24, 2026
CVE-2026-2794	Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android	6.5 Medium	Feb 24, 2026
CVE-2026-2793	Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and…	9.8 Critical	Feb 24, 2026
CVE-2026-2792	Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147	9.8 Critical	Feb 24, 2026
CVE-2026-2778	Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component	10.0 Critical	Feb 24, 2026
CVE-2026-2776	Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software	10.0 Critical	Feb 24, 2026
CVE-2026-2777	Privilege escalation in the Messaging System component	9.8 Critical	Feb 24, 2026

Other Red Hat products