# Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support. Every CVE that names Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification](https://agentprime.io/advisories/CVE-2025-14831.md) `CVE-2025-14831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Denial of service - [Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response](https://agentprime.io/advisories/CVE-2026-1761.md) `CVE-2026-1761` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 2 Feb 2026 · Tags: Memory corruption - [Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing](https://agentprime.io/advisories/CVE-2025-14242.md) `CVE-2025-14242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication](https://agentprime.io/advisories/CVE-2026-0719.md) `CVE-2026-0719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jan 2026 · Tags: Memory corruption - [Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)](https://agentprime.io/advisories/CVE-2025-14523.md) `CVE-2025-14523` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Dec 2025 · Tags: HTTP request smuggling - [Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14512.md) `CVE-2025-14512` · CVE record: GNOME glib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption - [Glib: glib: buffer underflow in gvariant parser leads to heap corruption](https://agentprime.io/advisories/CVE-2025-14087.md) `CVE-2025-14087` · CVE record: GNOME glib and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: Memory corruption - [Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash](https://agentprime.io/advisories/CVE-2025-66287.md) `CVE-2025-66287` · CVE record: The WebKitGTK Team WebKitGTK and 4 more · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2025 · Tags: Memory corruption - [Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop](https://agentprime.io/advisories/CVE-2025-13947.md) `CVE-2025-13947` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-346 - [Glib: integer overflow in in g_escape_uri_string()](https://agentprime.io/advisories/CVE-2025-13601.md) `CVE-2025-13601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.7 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption - [Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos](https://agentprime.io/advisories/CVE-2025-13502.md) `CVE-2025-13502` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for gettext command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61662.md) `CVE-2025-61662` · CVE record: GNU grub2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Python-kdcproxy: remote dos via unbounded tcp upstream buffering](https://agentprime.io/advisories/CVE-2025-59089.md) `CVE-2025-59089` · CVE record: latchset kdcproxy and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Denial of service - [Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv](https://agentprime.io/advisories/CVE-2025-59088.md) `CVE-2025-59088` · CVE record: latchset kdcproxy and 4 more · CVSS 8.6 High · Not analysed yet · Published 12 Nov 2025 · Tags: Server-side request forgery (SSRF) - [Xorg: xmayland: use-after-free in xpresentnotify structure creation](https://agentprime.io/advisories/CVE-2025-62229.md) `CVE-2025-62229` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in xkb client resource removal](https://agentprime.io/advisories/CVE-2025-62230.md) `CVE-2025-62230` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: value overflow in xkbsetcompatmap()](https://agentprime.io/advisories/CVE-2025-62231.md) `CVE-2025-62231` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md) `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-7493.md) `CVE-2025-7493` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-1220 - [Libsoup: out-of-bounds read in cookie date handling of libsoup http library](https://agentprime.io/advisories/CVE-2025-11021.md) `CVE-2025-11021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libtiff: libtiff write-what-where](https://agentprime.io/advisories/CVE-2025-9900.md) `CVE-2025-9900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-123 - [Udisks: out-of-bounds read in udisks daemon](https://agentprime.io/advisories/CVE-2025-8067.md) `CVE-2025-8067` · CVE record: storaged-project udisks and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: Memory corruption - [Linux-pam: incomplete fix for cve-2025-6020](https://agentprime.io/advisories/CVE-2025-8941.md) `CVE-2025-8941` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Aug 2025 · Tags: Path traversal - [Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr](https://agentprime.io/advisories/CVE-2025-7425.md) `CVE-2025-7425` · CVE record: GNOME libxml2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf](https://agentprime.io/advisories/CVE-2025-7345.md) `CVE-2025-7345` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Libssh: incorrect return code handling in ssh_kdf() in libssh](https://agentprime.io/advisories/CVE-2025-5372.md) `CVE-2025-5372` · CVE record: libssh libssh and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-682 - [Libssh: out-of-bounds read in sftp_handle()](https://agentprime.io/advisories/CVE-2025-5318.md) `CVE-2025-5318` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption - [Libblockdev: lpe from allow_active to root in libblockdev via udisks](https://agentprime.io/advisories/CVE-2025-6019.md) `CVE-2025-6019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 19 Jun 2025 · Tags: Privilege escalation - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension](https://agentprime.io/advisories/CVE-2025-49180.md) `CVE-2025-49180` · CVE record: X.Org xwayland and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension](https://agentprime.io/advisories/CVE-2025-49179.md) `CVE-2025-49179` · CVE record: X.Org xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore](https://agentprime.io/advisories/CVE-2025-49178.md) `CVE-2025-49178` · CVE record: X.Org xwayland and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-667 - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension](https://agentprime.io/advisories/CVE-2025-49176.md) `CVE-2025-49176` · CVE record: X.Org xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors](https://agentprime.io/advisories/CVE-2025-49175.md) `CVE-2025-49175` · CVE record: X.Org xwayland and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-4404.md) `CVE-2025-4404` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-1220 - [Linux-pam: linux-pam directory traversal](https://agentprime.io/advisories/CVE-2025-6020.md) `CVE-2025-6020` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Path traversal - [Libxml: heap use after free (uaf) leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49794.md) `CVE-2025-49794` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml2: stack buffer overflow in xmllint interactive shell command handling](https://agentprime.io/advisories/CVE-2025-6170.md) `CVE-2025-6170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml: type confusion leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49796.md) `CVE-2025-49796` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2](https://agentprime.io/advisories/CVE-2025-6021.md) `CVE-2025-6021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: Memory corruption - [Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5914.md) `CVE-2025-5914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption - [Gimp: multiple use after free in xcf parser](https://agentprime.io/advisories/CVE-2025-48798.md) `CVE-2025-48798` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: multiple heap buffer overflows in tga parser](https://agentprime.io/advisories/CVE-2025-48797.md) `CVE-2025-48797` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus](https://agentprime.io/advisories/CVE-2025-5024.md) `CVE-2025-5024` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 22 May 2025 · Tags: Denial of service - [Libsoup: integer overflow in cookie expiration date handling in libsoup](https://agentprime.io/advisories/CVE-2025-4945.md) `CVE-2025-4945` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup](https://agentprime.io/advisories/CVE-2025-4948.md) `CVE-2025-4948` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar](https://agentprime.io/advisories/CVE-2025-4373.md) `CVE-2025-4373` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption - [Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled](https://agentprime.io/advisories/CVE-2025-3891.md) `CVE-2025-3891` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-248 - [Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server](https://agentprime.io/advisories/CVE-2025-46421.md) `CVE-2025-46421` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Information disclosure - [Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c](https://agentprime.io/advisories/CVE-2025-46420.md) `CVE-2025-46420` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Denial of service - [Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value](https://agentprime.io/advisories/CVE-2025-32911.md) `CVE-2025-32911` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-590 - [Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions](https://agentprime.io/advisories/CVE-2025-3576.md) `CVE-2025-3576` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Weak cryptography or TLS - [Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process](https://agentprime.io/advisories/CVE-2025-32914.md) `CVE-2025-32914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: out of bounds reads in soup_headers_parse_request()](https://agentprime.io/advisories/CVE-2025-32906.md) `CVE-2025-32906` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header](https://agentprime.io/advisories/CVE-2025-32913.md) `CVE-2025-32913` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: denial of service attack to websocket server](https://agentprime.io/advisories/CVE-2025-32049.md) `CVE-2025-32049` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2025 · Tags: Denial of service - [Yelp: arbitrary file read](https://agentprime.io/advisories/CVE-2025-3155.md) `CVE-2025-3155` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 3 Apr 2025 · Tags: Open redirect - [Libsoup: heap buffer over-read in \`skip_insignificant_space\` when sniffing content](https://agentprime.io/advisories/CVE-2025-2784.md) `CVE-2025-2784` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 3 Apr 2025 · Tags: Memory corruption - [Libexpat: expat: improper restriction of xml entity expansion depth in libexpat](https://agentprime.io/advisories/CVE-2024-8176.md) `CVE-2024-8176` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Mar 2025 · Tags: Denial of service - [Xorg: xwayland: use-after-free in syncinittrigger()](https://agentprime.io/advisories/CVE-2025-26601.md) `CVE-2025-26601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .