Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-0992	Libxml2: libxml2: denial of service via crafted xml catalogs	2.9 Low	Jan 15, 2026
CVE-2026-0989	Libxml2: unbounded relaxng include recursion leading to stack overflow	3.7 Low	Jan 15, 2026
CVE-2026-0990	Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing	5.9 Medium	Jan 15, 2026
CVE-2026-22859	FreeRDP is a free implementation of the Remote Desktop Protocol	5.6 Medium	Jan 14, 2026
CVE-2026-22858	FreeRDP is a free implementation of the Remote Desktop Protocol	5.6 Medium	Jan 14, 2026
CVE-2026-22855	FreeRDP is a free implementation of the Remote Desktop Protocol	5.6 Medium	Jan 14, 2026
CVE-2026-22853	FreeRDP is a free implementation of the Remote Desktop Protocol	6.8 Medium	Jan 14, 2026
CVE-2025-14242	Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing	6.5 Medium	Jan 14, 2026
CVE-2026-0716	Libsoup: out-of-bounds read in libsoup websocket frame processing	4.8 Medium	Jan 13, 2026
CVE-2026-0891	Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146	8.1 High	Jan 13, 2026
CVE-2026-0881	Sandbox escape in the Messaging System component	10.0 Critical	Jan 13, 2026
CVE-2026-0882	Use-after-free in the IPC component	8.8 High	Jan 13, 2026
CVE-2026-0879	Sandbox escape due to incorrect boundary conditions in the Graphics component	9.8 Critical	Jan 13, 2026
CVE-2026-0880	Sandbox escape due to integer overflow in the Graphics component	8.8 High	Jan 13, 2026
CVE-2026-0878	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component	8.0 High	Jan 13, 2026
CVE-2026-0877	Mitigation bypass in the DOM: Security component	8.1 High	Jan 13, 2026
CVE-2025-68493	Missing XML Validation vulnerability in Apache Struts, Apache Struts	Not rated	Jan 11, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2026-0719	Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication	8.6 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critical	Jan 7, 2026
CVE-2025-14946	Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri	4.8 Medium	Dec 19, 2025

Other Red Hat products