Vulnérabilités connues pour Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-7322	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 Élevée	28 avr. 2026
CVE-2026-7320	Information disclosure due to incorrect boundary conditions in the Audio/Video component	7.5 Élevée	28 avr. 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Non notée	28 avr. 2026
CVE-2026-40976	In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all…	9.1 Critique	27 avr. 2026
CVE-2026-40975	Values produced by ${random.value} are not suitable for use as secrets	4.8 Moyenne	27 avr. 2026
CVE-2026-6951	Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete…	9.8 Critique	25 avr. 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-40897	Math.js is an extensive math library for JavaScript and Node.js	8.8 Élevée	24 avr. 2026
CVE-2026-31663	In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish…	7.8 Élevée	24 avr. 2026
CVE-2026-31641	In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds…	7.8 Élevée	24 avr. 2026
CVE-2026-31617	In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in…	5.5 Moyenne	24 avr. 2026
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critique	24 avr. 2026
CVE-2026-41044	Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ,…	Non notée	24 avr. 2026
CVE-2026-40466	Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ…	Non notée	24 avr. 2026
CVE-2026-41316	ERB is a templating system for Ruby	8.1 Élevée	24 avr. 2026
CVE-2026-6732	Libxml2: libxml2: denial of service via crafted xsd-validated document	6.5 Moyenne	23 avr. 2026
CVE-2026-2708	Libsoup: libsoup: http request smuggling via duplicate content-length headers	3.7 Faible	23 avr. 2026
CVE-2026-34003	Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access	7.8 Élevée	23 avr. 2026
CVE-2026-34001	Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption	7.8 Élevée	23 avr. 2026
CVE-2026-33999	Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling	7.8 Élevée	23 avr. 2026
CVE-2025-66286	Webkitgtk: authorization bypass through webpage::send-request signal handler	4.7 Moyenne	23 avr. 2026

Autres produits Red Hat