# Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Every CVE that names Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Libsoup: libsoup: heap buffer overflow during websocket client-frame masking](https://agentprime.io/advisories/CVE-2026-102559.md) `CVE-2026-102559` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth](https://agentprime.io/advisories/CVE-2026-102558.md) `CVE-2026-102558` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket message reassembly](https://agentprime.io/advisories/CVE-2026-102557.md) `CVE-2026-102557` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion](https://agentprime.io/advisories/CVE-2026-102556.md) `CVE-2026-102556` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization](https://agentprime.io/advisories/CVE-2026-96512.md) `CVE-2026-96512` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control - [Flatpak-builder: host code execution via \`git am\` hook execution in patch source extraction (\`use-git-am\`)](https://agentprime.io/advisories/CVE-2026-86320.md) `CVE-2026-86320` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Code injection - [Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url](https://agentprime.io/advisories/CVE-2026-18147.md) `CVE-2026-18147` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS) - [Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup](https://agentprime.io/advisories/CVE-2026-87766.md) `CVE-2026-87766` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal - [Libxml2: double-free/uaf in libxml2 python bindings](https://agentprime.io/advisories/CVE-2026-74860.md) `CVE-2026-74860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)](https://agentprime.io/advisories/CVE-2026-76561.md) `CVE-2026-76561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection - [389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property](https://agentprime.io/advisories/CVE-2026-18922.md) `CVE-2026-18922` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass - [389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search](https://agentprime.io/advisories/CVE-2026-18453.md) `CVE-2026-18453` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()](https://agentprime.io/advisories/CVE-2026-18355.md) `CVE-2026-18355` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption - [389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn](https://agentprime.io/advisories/CVE-2026-76560.md) `CVE-2026-76560` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control - [Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service](https://agentprime.io/advisories/CVE-2026-79678.md) `CVE-2026-79678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Code injection - [Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci](https://agentprime.io/advisories/CVE-2026-76578.md) `CVE-2026-76578` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass - [Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly](https://agentprime.io/advisories/CVE-2026-81665.md) `CVE-2026-81665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Gvfs: sftp: heap-based buffer overflow in read_reply()](https://agentprime.io/advisories/CVE-2026-84268.md) `CVE-2026-84268` · CVE record: GNOME gvfs and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature](https://agentprime.io/advisories/CVE-2026-83596.md) `CVE-2026-83596` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption - [Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function](https://agentprime.io/advisories/CVE-2026-78002.md) `CVE-2026-78002` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption - [Webkitgtk: use-after-free of jscvalue function parameters](https://agentprime.io/advisories/CVE-2026-78376.md) `CVE-2026-78376` · CVE record: WebKit WebKit and 4 more · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Memory corruption - [Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships](https://agentprime.io/advisories/CVE-2026-11861.md) `CVE-2026-11861` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [Ipa: freeipa: unauthenticated dos in \`/ipa/i18n_messages\` via unbounded request body read](https://agentprime.io/advisories/CVE-2026-73198.md) `CVE-2026-73198` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore](https://agentprime.io/advisories/CVE-2026-13097.md) `CVE-2026-13097` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-706 - [Ipa: freeipa: unauthenticated dos in \`/ipa/migration/migration.py\` via unbounded request body read](https://agentprime.io/advisories/CVE-2026-73197.md) `CVE-2026-73197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow](https://agentprime.io/advisories/CVE-2026-18917.md) `CVE-2026-18917` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd](https://agentprime.io/advisories/CVE-2026-19654.md) `CVE-2026-19654` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write](https://agentprime.io/advisories/CVE-2026-73433.md) `CVE-2026-73433` · CVE record: GStreamer gst-plugins-good and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing](https://agentprime.io/advisories/CVE-2026-73434.md) `CVE-2026-73434` · CVE record: GStreamer gst-plugins-good and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes](https://agentprime.io/advisories/CVE-2026-19550.md) `CVE-2026-19550` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control - [Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation](https://agentprime.io/advisories/CVE-2026-72694.md) `CVE-2026-72694` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Path traversal - [Libvirt: swtpm privilege escalation via symlink following](https://agentprime.io/advisories/CVE-2026-63622.md) `CVE-2026-63622` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Path traversal - [Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder](https://agentprime.io/advisories/CVE-2026-19387.md) `CVE-2026-19387` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 10 Aug 2026 · Tags: Memory corruption - [Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()](https://agentprime.io/advisories/CVE-2026-15816.md) `CVE-2026-15816` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection - [Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders](https://agentprime.io/advisories/CVE-2026-18649.md) `CVE-2026-18649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Denial of service - [389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check](https://agentprime.io/advisories/CVE-2026-11770.md) `CVE-2026-11770` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Other injection - [389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing](https://agentprime.io/advisories/CVE-2026-15722.md) `CVE-2026-15722` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Memory corruption - [Pcp: pcp: denial of service due to signed integer overflow](https://agentprime.io/advisories/CVE-2026-16529.md) `CVE-2026-16529` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption - [Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules](https://agentprime.io/advisories/CVE-2026-16527.md) `CVE-2026-16527` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control, Authentication bypass - [Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability](https://agentprime.io/advisories/CVE-2026-16526.md) `CVE-2026-16526` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-403 - [Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection](https://agentprime.io/advisories/CVE-2026-16524.md) `CVE-2026-16524` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export](https://agentprime.io/advisories/CVE-2026-16313.md) `CVE-2026-16313` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Other injection - [Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module](https://agentprime.io/advisories/CVE-2026-16445.md) `CVE-2026-16445` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering](https://agentprime.io/advisories/CVE-2026-15588.md) `CVE-2026-15588` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Denial of service - [Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation](https://agentprime.io/advisories/CVE-2026-15711.md) `CVE-2026-15711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service - [Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service](https://agentprime.io/advisories/CVE-2026-15709.md) `CVE-2026-15709` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-409 - [Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback](https://agentprime.io/advisories/CVE-2026-59692.md) `CVE-2026-59692` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer](https://agentprime.io/advisories/CVE-2026-59691.md) `CVE-2026-59691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind](https://agentprime.io/advisories/CVE-2026-11610.md) `CVE-2026-11610` · CVE record: 389ds 389-ds-base and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md) `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal - [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md) `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188 - [Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"](https://agentprime.io/advisories/CVE-2026-58016.md) `CVE-2026-58016` · CVE record: GNOME GLib and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md) `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal - [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md) `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193 - [Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"](https://agentprime.io/advisories/CVE-2026-58013.md) `CVE-2026-58013` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()](https://agentprime.io/advisories/CVE-2026-58012.md) `CVE-2026-58012` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime](https://agentprime.io/advisories/CVE-2026-58011.md) `CVE-2026-58011` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()](https://agentprime.io/advisories/CVE-2026-58010.md) `CVE-2026-58010` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image](https://agentprime.io/advisories/CVE-2026-12912.md) `CVE-2026-12912` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications](https://agentprime.io/advisories/CVE-2026-13601.md) `CVE-2026-13601` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-693 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .