Red Hat Red Hat Enterprise Linux 8

• CVE-2026-18922 Critical 9.8 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property 0.6%
• CVE-2026-18453 High 7.5 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search 0.8%
• CVE-2026-18355 High 7.5 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() 0.8%
• CVE-2026-76560 High 7.5 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn 0.6%
• CVE-2026-79678 High 8.1 Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service 0.9%
• CVE-2026-76578 Critical 9.8 Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci 1.3%
• CVE-2026-76925 Medium 5.8 Flatpak: flatpak: toctou race condition allows symlink redirection 0.1%
• CVE-2026-85769 Medium 6.5 Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize 0.4%
• CVE-2026-85534 Medium 5.9 Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read 0.3%
• CVE-2026-81666 Medium 6.5 Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems 0.2%
• CVE-2026-81665 High 7.5 Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly 0.4%
• CVE-2026-85197 High 7.6 Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload 0.3%
• CVE-2026-84185 Medium 5.9 Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification 0.1%
• CVE-2026-71224 Medium 4.7 Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk 0.1%
• CVE-2026-71222 Medium 5.3 Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing 0.1%
• CVE-2026-71221 High 7.0 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta 0.1%
• CVE-2026-71220 High 7.0 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit 0.1%
• CVE-2026-71219 Medium 4.7 Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal 0.1%
• CVE-2026-85150 High 7.5 Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header 0.5%
• CVE-2026-84838 High 7.8 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 1.1%
• CVE-2026-84837 High 7.8 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 0.7%
• CVE-2026-78409 High 7.0 Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks 0.2%
• CVE-2026-78410 High 7.8 Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection 0.2%
• CVE-2026-78408 High 7.9 Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 0.2%
• CVE-2026-53683 Medium 4.3 Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html 0.3%
• CVE-2026-84270 Medium 4.3 Gvfs: mtp: out-of-bounds read in do_read() 0.1%
• CVE-2026-84269 Medium 6.5 Gvfs: afp: heap-based buffer overflow in dsi read path 0.3%
• CVE-2026-84267 Medium 4.3 Gvfs: sftp: uninitialized heap disclosure in read_string() 0.2%
• CVE-2026-84268 High 8.8 Gvfs: sftp: heap-based buffer overflow in read_reply() 0.6%
• CVE-2026-84233 High 7.0 Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames 0.2%
• CVE-2026-53682 Medium 5.3 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts 0.2%
• CVE-2026-11873 Medium 6.5 Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure 0.5%
• CVE-2026-18743 Low 2.5 Popt-devel: popt-static: short realloc in poptconfigfiletostring 0.1%
• CVE-2026-83596 High 8.8 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature 0.5%
• CVE-2026-13732 High 7.0 Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf 0.1%
• CVE-2026-17615 High 7.5 Resteasy-core: resteasy sourceprovider remote unauthenticated file read 0.8%
• CVE-2026-81624 High 7.5 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite 0.6%
• CVE-2026-82343 Medium 6.1 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling 0.2%
• CVE-2026-82330 Medium 6.1 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check 0.3%
• CVE-2026-82328 Medium 6.1 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count 0.2%
• CVE-2026-82327 Medium 5.5 Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data 0.2%
• CVE-2026-82324 Medium 6.1 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 0.2%
• CVE-2026-81893 Medium 4.7 Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery 0.2%
• CVE-2026-78002 High 7.5 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 1.1%
• CVE-2026-79902 Medium 5.5 Gimp: stack vla size underflow denial of service in seattle 0.3%
• CVE-2026-80185 Medium 5.7 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root 0.3%
• CVE-2026-80186 High 7.6 Bluez: stack overflow in name2utf8 causes dos and potential code execution 0.5%
• CVE-2026-80101 Medium 4.4 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation 0.2%
• CVE-2026-79992 High 7.8 Emacs: emacs: command injection via crafted filenames in tramp 0.2%
• CVE-2026-79655 High 7.8 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write 0.2%