What’s Vulnerable › Products
Red Hat Enterprise Linux 8.2 Advanced Update Support vulnerabilities
57 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 45 published in the last 12 months.
Check whether your Red Hat Enterprise Linux 8.2 Advanced Update Support version is affected
Latest Red Hat Enterprise Linux 8.2 Advanced Update Support vulnerabilities
- CVE-2025-14905 — 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow (CVSS 7.2)
- CVE-2026-1761 — Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response (CVSS 8.6)
- CVE-2025-14242 — Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing (CVSS 6.5)
- CVE-2026-0719 — Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication (CVSS 8.6)
- CVE-2025-14523 — Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) (CVSS 8.2)
- CVE-2025-66287 — Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash (CVSS 8.8)
- CVE-2025-13947 — Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop (CVSS 7.4)
- CVE-2025-13502 — Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos (CVSS 7.5)
- CVE-2025-59089 — Python-kdcproxy: remote dos via unbounded tcp upstream buffering (CVSS 5.9)
- CVE-2025-59088 — Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv (CVSS 8.6)
- CVE-2025-62229 — Xorg: xmayland: use-after-free in xpresentnotify structure creation (CVSS 7.3)
- CVE-2025-11561 — Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems (CVSS 8.8)
- CVE-2025-7493 — Freeipa: idm: privilege escalation from host to domain admin in freeipa (CVSS 9.1)
- CVE-2025-11021 — Libsoup: out-of-bounds read in cookie date handling of libsoup http library (CVSS 7.5)
- CVE-2025-9900 — Libtiff: libtiff write-what-where (CVSS 8.8)
- CVE-2025-8067 — Udisks: out-of-bounds read in udisks daemon (CVSS 8.5)
- CVE-2025-8941 — Linux-pam: incomplete fix for cve-2025-6020 (CVSS 7.8)
- CVE-2025-7425 — Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr (CVSS 7.8)
- CVE-2025-7345 — Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf (CVSS 7.5)
- CVE-2025-6019 — Libblockdev: lpe from allow_active to root in libblockdev via udisks (CVSS 7.0)
- CVE-2025-49180 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension (CVSS 7.8)
- CVE-2025-49179 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension (CVSS 7.3)
- CVE-2025-49178 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore (CVSS 5.5)
- CVE-2025-49176 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension (CVSS 7.3)
- CVE-2025-49175 — Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors (CVSS 6.1)