Red Hat Red Hat Enterprise Linux 8

• CVE-2026-1801 Medium 5.3 Libsoup: libsoup: http request smuggling via malformed chunk headers 0.4%
• CVE-2026-1760 Medium 5.3 Libsoup: soupserver: denial of service via http request smuggling 0.5%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%
• CVE-2026-1539 Medium 5.8 Libsoup: libsoup: credential leakage via http redirects 0.3%
• CVE-2026-1536 Medium 5.8 Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header 0.3%
• CVE-2026-1489 Medium 5.4 Glib: glib: memory corruption via integer overflow in unicode case conversion 0.4%
• CVE-2026-1485 Low 2.8 Glib: glib: local denial of service via buffer underflow in content type parsing 0.2%
• CVE-2026-1484 Medium 4.2 Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode() 0.3%
• CVE-2026-1467 Medium 5.8 Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 0.4%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-9615 Low 3.3 Networkmanager: networkmanager file access 0.2%
• CVE-2026-0810 High 7.1 Gix-date: gix-date: undefined behavior due to invalid string generation 0.2%
• CVE-2026-0988 Low 3.7 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() 0.4%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0716 Medium 4.8 Libsoup: out-of-bounds read in libsoup websocket frame processing 0.4%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2025-14946 Medium 4.8 Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri 0.1%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-66287 High 8.8 Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash 0.5%
• CVE-2025-13947 High 7.4 Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop 0.4%
• CVE-2025-12744 High 8.8 Abrt: command-injection in abrt leading to local privilege escalation 0.7%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13502 High 7.5 Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos 0.6%
• CVE-2025-54770 Medium 4.9 Grub2: use-after-free in net_set_vlan 0.2%
• CVE-2025-61664 Medium 4.9 Grub2: missing unregister call for normal_exit command may lead to use-after-free 0.1%
• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2025-13193 Medium 5.5 Libvirt: information disclosure via world-readable vm snapshots 0.1%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%
• CVE-2025-59088 High 8.6 Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv 0.5%
• CVE-2025-12748 Medium 5.5 Libvirt: denial of service in xml parsing 0.2%
• CVE-2025-10230 Critical 10.0 Samba: command injection in wins server hook script 39.8%
• CVE-2025-12464 Medium 6.2 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 0.2%
• CVE-2025-62229 High 7.3 Xorg: xmayland: use-after-free in xpresentnotify structure creation 0.5%
• CVE-2025-62230 High 7.3 Xorg: xwayland: use-after-free in xkb client resource removal 0.3%
• CVE-2025-62231 High 7.3 Xorg: xmayland: value overflow in xkbsetcompatmap() 0.3%
• CVE-2025-12105 High 7.5 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 0.5%
• CVE-2025-11568 Medium 4.4 Luksmeta: data corruption when handling luks1 partitions with luksmeta 0.1%
• CVE-2025-9640 Medium 4.3 Samba: vfs_streams_xattr uninitialized memory write possible 0.5%
• CVE-2025-11731 Low 3.1 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 0.3%