agentprime: red-hat-enterprise-linux-8-4-advanced-mission-critical-update-supportEvery new CVE for red-hat-enterprise-linux-8-4-advanced-mission-critical-update-support.https://agentprime.io/CVE-2026-114406: Ca-certificates: distrust emudhra intermediate ca certificates due to security concernshttps://agentprime.io/advisories/CVE-2026-114406/https://agentprime.io/advisories/CVE-2026-114406/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 20:56:26 GMTCVECVE-2026-102559: Libsoup: libsoup: heap buffer overflow during websocket client-frame maskinghttps://agentprime.io/advisories/CVE-2026-102559/https://agentprime.io/advisories/CVE-2026-102559/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:34 GMTCVECVE-2026-102558: Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growthhttps://agentprime.io/advisories/CVE-2026-102558/https://agentprime.io/advisories/CVE-2026-102558/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:15:32 GMTCVECVE-2026-102557: Libsoup: libsoup: heap buffer overflow during websocket message reassemblyhttps://agentprime.io/advisories/CVE-2026-102557/https://agentprime.io/advisories/CVE-2026-102557/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:57 GMTCVECVE-2026-102556: Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusionhttps://agentprime.io/advisories/CVE-2026-102556/https://agentprime.io/advisories/CVE-2026-102556/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:11:50 GMTCVECVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-86320: Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)https://agentprime.io/advisories/CVE-2026-86320/https://agentprime.io/advisories/CVE-2026-86320/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 07:27:33 GMTCVECVE-2026-18147: Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlhttps://agentprime.io/advisories/CVE-2026-18147/https://agentprime.io/advisories/CVE-2026-18147/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:39:18 GMTCVECVE-2026-87766: Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setuphttps://agentprime.io/advisories/CVE-2026-87766/https://agentprime.io/advisories/CVE-2026-87766/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 08:34:35 GMTCVECVE-2026-74860: Libxml2: double-free/uaf in libxml2 python bindingshttps://agentprime.io/advisories/CVE-2026-74860/https://agentprime.io/advisories/CVE-2026-74860/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:27:45 GMTCVECVE-2026-76561: Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)https://agentprime.io/advisories/CVE-2026-76561/https://agentprime.io/advisories/CVE-2026-76561/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 07:55:29 GMTCVECVE-2026-18922: 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary propertyhttps://agentprime.io/advisories/CVE-2026-18922/https://agentprime.io/advisories/CVE-2026-18922/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:53 GMTCVEcriticalCVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchhttps://agentprime.io/advisories/CVE-2026-18453/https://agentprime.io/advisories/CVE-2026-18453/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:48 GMTCVECVE-2026-18355: 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()https://agentprime.io/advisories/CVE-2026-18355/https://agentprime.io/advisories/CVE-2026-18355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:14:43 GMTCVECVE-2026-76560: 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnhttps://agentprime.io/advisories/CVE-2026-76560/https://agentprime.io/advisories/CVE-2026-76560/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 13:18:09 GMTCVECVE-2026-79678: Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of servicehttps://agentprime.io/advisories/CVE-2026-79678/https://agentprime.io/advisories/CVE-2026-79678/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:02:21 GMTCVECVE-2026-76578: Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token acihttps://agentprime.io/advisories/CVE-2026-76578/https://agentprime.io/advisories/CVE-2026-76578/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:01:36 GMTCVEcriticalCVE-2026-81665: Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyhttps://agentprime.io/advisories/CVE-2026-81665/https://agentprime.io/advisories/CVE-2026-81665/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 09:05:35 GMTCVECVE-2026-84268: Gvfs: sftp: heap-based buffer overflow in read_reply()https://agentprime.io/advisories/CVE-2026-84268/https://agentprime.io/advisories/CVE-2026-84268/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:15:23 GMTCVECVE-2026-83596: Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeaturehttps://agentprime.io/advisories/CVE-2026-83596/https://agentprime.io/advisories/CVE-2026-83596/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 20:46:24 GMTCVECVE-2026-78002: Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionhttps://agentprime.io/advisories/CVE-2026-78002/https://agentprime.io/advisories/CVE-2026-78002/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 16:12:59 GMTCVECVE-2026-78376: Webkitgtk: use-after-free of jscvalue function parametershttps://agentprime.io/advisories/CVE-2026-78376/https://agentprime.io/advisories/CVE-2026-78376/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:29:17 GMTCVECVE-2026-11861: Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipshttps://agentprime.io/advisories/CVE-2026-11861/https://agentprime.io/advisories/CVE-2026-11861/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:39:08 GMTCVEcriticalCVE-2026-73198: Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body readhttps://agentprime.io/advisories/CVE-2026-73198/https://agentprime.io/advisories/CVE-2026-73198/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:39:00 GMTCVECVE-2026-13097: Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastorehttps://agentprime.io/advisories/CVE-2026-13097/https://agentprime.io/advisories/CVE-2026-13097/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:37:55 GMTCVECVE-2026-73197: Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readhttps://agentprime.io/advisories/CVE-2026-73197/https://agentprime.io/advisories/CVE-2026-73197/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 10:31:31 GMTCVECVE-2026-18917: Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-18917/https://agentprime.io/advisories/CVE-2026-18917/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 09:54:50 GMTCVECVE-2026-19654: Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdhttps://agentprime.io/advisories/CVE-2026-19654/https://agentprime.io/advisories/CVE-2026-19654/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 20:46:31 GMTCVECVE-2026-73433: Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writehttps://agentprime.io/advisories/CVE-2026-73433/https://agentprime.io/advisories/CVE-2026-73433/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:27 GMTCVECVE-2026-73434: Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsinghttps://agentprime.io/advisories/CVE-2026-73434/https://agentprime.io/advisories/CVE-2026-73434/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:23 GMTCVECVE-2026-19550: Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writeshttps://agentprime.io/advisories/CVE-2026-19550/https://agentprime.io/advisories/CVE-2026-19550/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 20:46:42 GMTCVECVE-2026-72694: Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationhttps://agentprime.io/advisories/CVE-2026-72694/https://agentprime.io/advisories/CVE-2026-72694/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 08:37:55 GMTCVECVE-2026-63622: Libvirt: swtpm privilege escalation via symlink followinghttps://agentprime.io/advisories/CVE-2026-63622/https://agentprime.io/advisories/CVE-2026-63622/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:24 GMTCVECVE-2026-19387: Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderhttps://agentprime.io/advisories/CVE-2026-19387/https://agentprime.io/advisories/CVE-2026-19387/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 02:36:52 GMTCVECVE-2026-15816: Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()https://agentprime.io/advisories/CVE-2026-15816/https://agentprime.io/advisories/CVE-2026-15816/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 10:33:33 GMTCVECVE-2026-18649: Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadershttps://agentprime.io/advisories/CVE-2026-18649/https://agentprime.io/advisories/CVE-2026-18649/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 06:48:10 GMTCVECVE-2026-11770: 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkhttps://agentprime.io/advisories/CVE-2026-11770/https://agentprime.io/advisories/CVE-2026-11770/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 09:18:58 GMTCVECVE-2026-15722: 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsinghttps://agentprime.io/advisories/CVE-2026-15722/https://agentprime.io/advisories/CVE-2026-15722/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 09:18:50 GMTCVECVE-2026-16529: Pcp: pcp: denial of service due to signed integer overflowhttps://agentprime.io/advisories/CVE-2026-16529/https://agentprime.io/advisories/CVE-2026-16529/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 05:30:18 GMTCVECVE-2026-16527: Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access ruleshttps://agentprime.io/advisories/CVE-2026-16527/https://agentprime.io/advisories/CVE-2026-16527/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 05:30:16 GMTCVECVE-2026-16526: Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityhttps://agentprime.io/advisories/CVE-2026-16526/https://agentprime.io/advisories/CVE-2026-16526/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 05:20:07 GMTCVECVE-2026-16524: Pcp: pcp linux_sockets pmda: arbitrary command execution via command injectionhttps://agentprime.io/advisories/CVE-2026-16524/https://agentprime.io/advisories/CVE-2026-16524/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 05:15:15 GMTCVECVE-2026-16313: Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exporthttps://agentprime.io/advisories/CVE-2026-16313/https://agentprime.io/advisories/CVE-2026-16313/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 16:47:06 GMTCVECVE-2026-16445: Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd modulehttps://agentprime.io/advisories/CVE-2026-16445/https://agentprime.io/advisories/CVE-2026-16445/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 12:51:08 GMTCVECVE-2026-15588: Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferinghttps://agentprime.io/advisories/CVE-2026-15588/https://agentprime.io/advisories/CVE-2026-15588/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 12:12:06 GMTCVECVE-2026-15711: Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationhttps://agentprime.io/advisories/CVE-2026-15711/https://agentprime.io/advisories/CVE-2026-15711/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 19:45:47 GMTCVECVE-2026-15709: Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of servicehttps://agentprime.io/advisories/CVE-2026-15709/https://agentprime.io/advisories/CVE-2026-15709/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 19:41:37 GMTCVECVE-2026-59692: Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackhttps://agentprime.io/advisories/CVE-2026-59692/https://agentprime.io/advisories/CVE-2026-59692/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:35:31 GMTCVECVE-2026-59691: Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferhttps://agentprime.io/advisories/CVE-2026-59691/https://agentprime.io/advisories/CVE-2026-59691/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:34:47 GMTCVECVE-2026-11610: 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindhttps://agentprime.io/advisories/CVE-2026-11610/https://agentprime.io/advisories/CVE-2026-11610/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:17:36 GMTCVE