Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-2775 | Mitigation bypass in the DOM: HTML Parser component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2773 | Incorrect boundary conditions in the Web Audio component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2774 | Integer overflow in the Audio/Video component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2772 | Use-after-free in the Audio/Video: Playback component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2771 | Undefined behavior in the DOM: Core & HTML component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2770 | Use-after-free in the DOM: Bindings (WebIDL) component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2768 | Sandbox escape in the Storage: IndexedDB component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2769 | Use-after-free in the Storage: IndexedDB component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2767 | Use-after-free in the JavaScript: WebAssembly component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2766 | Use-after-free in the JavaScript Engine: JIT component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2764 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2765 | Use-after-free in the JavaScript Engine component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2763 | Use-after-free in the JavaScript Engine component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2761 | Sandbox escape in the Graphics: WebRender component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2762 | Integer overflow in the JavaScript: Standard Library component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2760 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2759 | Incorrect boundary conditions in the Graphics: ImageLib component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2758 | Use-after-free in the JavaScript: GC component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2757 | Incorrect boundary conditions in the WebRTC: Audio/Video component | 9.8 Critical | Feb 24, 2026 |
| CVE-2025-14905 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow | 7.2 High | Feb 23, 2026 |
| CVE-2026-2048 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2047 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2045 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2044 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-0797 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430