What’s Vulnerable › Products
Red Hat Enterprise Linux 8 vulnerabilities
532 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 401 published in the last 12 months.
Check whether your Red Hat Enterprise Linux 8 version is affected
Latest Red Hat Enterprise Linux 8 vulnerabilities
- CVE-2026-120194 — Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step (CVSS 7.5)
- CVE-2026-119842 — Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check (CVSS 6.5)
- CVE-2026-119728 — Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure (CVSS 5.5)
- CVE-2026-119528 — Gimp: gimp: stack buffer overflow in psd image resource header loader (CVSS 7.8)
- CVE-2026-114691 — Gcc: integer wrap in `std (CVSS 5.9)
- CVE-2026-114690 — Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std (CVSS 6.2)
- CVE-2026-118475 — Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk (CVSS 3.6)
- CVE-2026-112922 — Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading (CVSS 3.3)
- CVE-2026-110133 — Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback (CVSS 5.8)
- CVE-2026-93009 — Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder (CVSS 4.3)
- CVE-2026-93010 — Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check (CVSS 4.3)
- CVE-2026-93006 — Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content (CVSS 6.8)
- CVE-2026-93007 — Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation (CVSS 5.3)
- CVE-2026-93011 — Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms (CVSS 5.3)
- CVE-2026-93008 — Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations (CVSS 6.8)
- CVE-2026-85498 — Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow (CVSS 3.5)
- CVE-2026-117548 — 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5)
- CVE-2026-116497 — Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon (CVSS 5.5)
- CVE-2026-115486 — Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning (CVSS 7.1)
- CVE-2026-115485 — Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio (CVSS 6.3)
- CVE-2026-115484 — Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg (CVSS 7.6)
- CVE-2026-115449 — Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest (CVSS 3.5)
- CVE-2026-115221 — Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership (CVSS 5.4)
- CVE-2026-115207 — Patch: filename validation bypass in reversal fallback allows file creation outside the working directory (CVSS 5.5)
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)