Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-21720	Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image	7.5 High	Jan 27, 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Medium	Jan 26, 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Low	Jan 26, 2026
CVE-2026-0810	Gix-date: gix-date: undefined behavior due to invalid string generation	7.1 High	Jan 26, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2025-15059	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-13878	Malformed BRID/HHIT records can cause `named` to terminate unexpectedly	7.5 High	Jan 21, 2026
CVE-2026-0988	Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()	3.7 Low	Jan 21, 2026
CVE-2026-21945	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Jan 20, 2026
CVE-2026-21932	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.4 High	Jan 20, 2026
CVE-2025-59465	A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an…	7.5 High	Jan 20, 2026
CVE-2025-55130	A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions…	7.1 High	Jan 20, 2026
CVE-2025-55131	A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using…	7.1 High	Jan 20, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-23884	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23883	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23534	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23533	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23532	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23531	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23530	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026

Other Red Hat products