Vulnérabilités connues pour Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-27140	SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution…	8.8 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critique	7 avr. 2026
CVE-2025-14821	Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows	7.8 Élevée	7 avr. 2026
CVE-2026-4631	Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection	9.8 Critique	7 avr. 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Moyenne	7 avr. 2026
CVE-2026-20911	A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and…	9.8 Critique	7 avr. 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critique	7 avr. 2026
CVE-2026-20889	A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b	9.8 Critique	7 avr. 2026
CVE-2026-24660	A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b	8.1 Élevée	7 avr. 2026
CVE-2026-5735	Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1	8.1 Élevée	7 avr. 2026
CVE-2026-5734	Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1	8.1 Élevée	7 avr. 2026
CVE-2026-5733	Incorrect boundary conditions in the Graphics: WebGPU component	8.8 Élevée	7 avr. 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critique	7 avr. 2026
CVE-2026-34197	Exploitée Apache ActiveMQ Improper Input Validation Vulnerability	Non notée	7 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-34589	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 Élevée	6 avr. 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 Élevée	6 avr. 2026
CVE-2026-34379	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	7.1 Élevée	6 avr. 2026
CVE-2026-5704	Tar: tar: hidden file injection via crafted archives	5.0 Moyenne	6 avr. 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 Élevée	6 avr. 2026
CVE-2026-5673	Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing	5.6 Moyenne	6 avr. 2026
CVE-2026-3184	Util-linux: util-linux: access control bypass due to improper hostname canonicalization	3.7 Faible	3 avr. 2026

Autres produits Red Hat