Red Hat Red Hat Enterprise Linux 8

• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5165 Medium 6.7 Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset 0.1%
• CVE-2026-5164 Medium 6.7 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request 0.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-5119 Medium 5.9 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 0.3%
• CVE-2026-28369 High 8.7 Undertow: undertow: request smuggling via malformed http request headers 0.7%
• CVE-2026-28367 High 8.7 Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 0.7%
• CVE-2026-28368 High 8.7 Undertow: undertow: request smuggling via inconsistent header parsing 0.7%
• CVE-2026-4948 Medium 5.5 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 0.1%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-2239 Low 2.8 Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow 0.5%
• CVE-2026-2272 Medium 4.3 Gimp: gimp: memory corruption due to integer overflow in ico file handling 0.9%
• CVE-2026-2271 Low 3.3 Gimp: gimp: denial of service via crafted psp image file 0.5%
• CVE-2026-2436 Medium 6.5 Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 0.5%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-4887 Medium 6.1 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image 0.6%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-1940 Medium 5.1 Gstreamer: incomplete fix of cve-2026-1940 0.2%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-2369 Medium 6.5 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 0.4%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4271 Medium 5.3 Libsoup: libsoup: denial of service via use-after-free in http/2 server 0.9%
• CVE-2026-3633 Low 3.9 Libsoup: libsoup: header and http request injection via crlf injection 0.2%
• CVE-2026-3632 Low 3.9 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames 0.2%
• CVE-2026-3634 Low 3.9 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header 0.2%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-4105 Medium 6.7 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method 0.1%
• CVE-2026-3099 Medium 5.8 Libsoup: libsoup: authentication bypass via digest authentication replay attack 0.4%
• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2026-28295 Medium 4.3 Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses 0.2%
• CVE-2026-28296 Medium 4.3 Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths 0.4%
• CVE-2026-26104 Medium 5.5 Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api <0.1%
• CVE-2026-26103 High 7.1 Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api <0.1%
• CVE-2025-14905 High 7.2 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 1.3%
• CVE-2026-2243 Medium 5.1 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 0.1%
• CVE-2026-0665 Medium 6.5 Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq 0.2%
• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-14876 Medium 5.5 Qemu-kvm: unbounded allocation in virtio-crypto 0.2%
• CVE-2025-1272 High 7.7 Kernel: secure boot does not automatically enable kernel lockdown 0.3%
• CVE-2025-0577 Medium 4.8 Glibc: vdso getrandom acceleration may return predictable randomness 0.2%
• CVE-2026-2443 Medium 5.3 Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 0.5%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%