Vulnérabilités connues pour Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-21720	Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image	7.5 Élevée	27 janv. 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Moyenne	26 janv. 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Faible	26 janv. 2026
CVE-2026-0810	Gix-date: gix-date: undefined behavior due to invalid string generation	7.1 Élevée	26 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026
CVE-2025-15059	GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 Élevée	23 janv. 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 Élevée	22 janv. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2025-13878	Malformed BRID/HHIT records can cause `named` to terminate unexpectedly	7.5 Élevée	21 janv. 2026
CVE-2026-0988	Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()	3.7 Faible	21 janv. 2026
CVE-2026-21945	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 Élevée	20 janv. 2026
CVE-2026-21932	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.4 Élevée	20 janv. 2026
CVE-2025-59465	A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an…	7.5 Élevée	20 janv. 2026
CVE-2025-55130	A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions…	7.1 Élevée	20 janv. 2026
CVE-2025-55131	A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using…	7.1 Élevée	20 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critique	20 janv. 2026
CVE-2026-23884	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23883	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23534	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23533	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23532	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23531	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23530	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026

Autres produits Red Hat