# Red Hat Enterprise Linux 8. Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-123151.md) `CVE-2026-123151` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch](https://agentprime.io/advisories/CVE-2026-121997.md) `CVE-2026-121997` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length](https://agentprime.io/advisories/CVE-2026-121996.md) `CVE-2026-121996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-121995.md) `CVE-2026-121995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length](https://agentprime.io/advisories/CVE-2026-121994.md) `CVE-2026-121994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption - [Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator](https://agentprime.io/advisories/CVE-2026-121259.md) `CVE-2026-121259` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags](https://agentprime.io/advisories/CVE-2026-119843.md) `CVE-2026-119843` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service - [Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service](https://agentprime.io/advisories/CVE-2026-120831.md) `CVE-2026-120831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure](https://agentprime.io/advisories/CVE-2026-120830.md) `CVE-2026-120830` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption - [Hivex: hivex: denial of service via out-of-bounds read in big-data block processing](https://agentprime.io/advisories/CVE-2026-120740.md) `CVE-2026-120740` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.0 Low · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step](https://agentprime.io/advisories/CVE-2026-120194.md) `CVE-2026-120194` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2026 · Tags: Denial of service - [Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check](https://agentprime.io/advisories/CVE-2026-119842.md) `CVE-2026-119842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation](https://agentprime.io/advisories/CVE-2026-119727.md) `CVE-2026-119727` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service](https://agentprime.io/advisories/CVE-2026-119729.md) `CVE-2026-119729` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure](https://agentprime.io/advisories/CVE-2026-119728.md) `CVE-2026-119728` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser](https://agentprime.io/advisories/CVE-2026-119777.md) `CVE-2026-119777` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: stack buffer overflow in psd image resource header loader](https://agentprime.io/advisories/CVE-2026-119528.md) `CVE-2026-119528` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: out-of-bounds read in std::from_chars](https://agentprime.io/advisories/CVE-2026-115456.md) `CVE-2026-115456` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: stack overflow in std::bitset on libstdc++](https://agentprime.io/advisories/CVE-2026-115455.md) `CVE-2026-115455` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: integer wrap in \`std](https://agentprime.io/advisories/CVE-2026-114691.md) `CVE-2026-114691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Gcc: confirmed out-of-bounds read/write in libstdc++ parallel \`std](https://agentprime.io/advisories/CVE-2026-114690.md) `CVE-2026-114690` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)](https://agentprime.io/advisories/CVE-2026-118593.md) `CVE-2026-118593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-667 - [Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service](https://agentprime.io/advisories/CVE-2026-103963.md) `CVE-2026-103963` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service - [Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk](https://agentprime.io/advisories/CVE-2026-118475.md) `CVE-2026-118475` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 3.6 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading](https://agentprime.io/advisories/CVE-2026-112922.md) `CVE-2026-112922` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Undertow: undertow: chunkreader message length permits chunk-size overflow](https://agentprime.io/advisories/CVE-2026-91920.md) `CVE-2026-91920` · CVE record: Red Hat Red Hat build of Apache Camel for Spring Boot 4 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: HTTP request smuggling - [Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback](https://agentprime.io/advisories/CVE-2026-110133.md) `CVE-2026-110133` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder](https://agentprime.io/advisories/CVE-2026-93009.md) `CVE-2026-93009` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check](https://agentprime.io/advisories/CVE-2026-93010.md) `CVE-2026-93010` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md) `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672 - [Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation](https://agentprime.io/advisories/CVE-2026-93007.md) `CVE-2026-93007` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service - [Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms](https://agentprime.io/advisories/CVE-2026-93011.md) `CVE-2026-93011` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md) `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345 - [Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow](https://agentprime.io/advisories/CVE-2026-85498.md) `CVE-2026-85498` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.5 Low · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service](https://agentprime.io/advisories/CVE-2026-117548.md) `CVE-2026-117548` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption - [Samba: access control bypass via vfs_ceph_rgw case-insensitive open](https://agentprime.io/advisories/CVE-2026-109411.md) `CVE-2026-109411` · CVE record: Samba Samba and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-178 - [Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon](https://agentprime.io/advisories/CVE-2026-116497.md) `CVE-2026-116497` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Memory corruption - [Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning](https://agentprime.io/advisories/CVE-2026-115486.md) `CVE-2026-115486` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio](https://agentprime.io/advisories/CVE-2026-115485.md) `CVE-2026-115485` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg](https://agentprime.io/advisories/CVE-2026-115484.md) `CVE-2026-115484` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption - [Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest](https://agentprime.io/advisories/CVE-2026-115449.md) `CVE-2026-115449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.5 Low · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure - [Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership](https://agentprime.io/advisories/CVE-2026-115221.md) `CVE-2026-115221` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control - [Patch: filename validation bypass in reversal fallback allows file creation outside the working directory](https://agentprime.io/advisories/CVE-2026-115207.md) `CVE-2026-115207` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal - [Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns](https://agentprime.io/advisories/CVE-2026-114406.md) `CVE-2026-114406` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS - [Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition](https://agentprime.io/advisories/CVE-2026-85518.md) `CVE-2026-85518` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal - [Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal](https://agentprime.io/advisories/CVE-2026-114370.md) `CVE-2026-114370` · CVE record: Red Hat Red Hat build of Apache Camel for Spring Boot 4 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal - [Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts](https://agentprime.io/advisories/CVE-2026-92824.md) `CVE-2026-92824` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml](https://agentprime.io/advisories/CVE-2026-92822.md) `CVE-2026-92822` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml](https://agentprime.io/advisories/CVE-2026-92823.md) `CVE-2026-92823` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-409 - [Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string](https://agentprime.io/advisories/CVE-2026-114038.md) `CVE-2026-114038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments](https://agentprime.io/advisories/CVE-2026-113496.md) `CVE-2026-113496` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-214 - [Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments](https://agentprime.io/advisories/CVE-2026-113495.md) `CVE-2026-113495` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.0 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-214 - [Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8](https://agentprime.io/advisories/CVE-2026-112177.md) `CVE-2026-112177` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-648 - [Gimp: gimp: use-after-free in xcf loader via prop_selected_path](https://agentprime.io/advisories/CVE-2026-112261.md) `CVE-2026-112261` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels](https://agentprime.io/advisories/CVE-2026-112258.md) `CVE-2026-112258` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)](https://agentprime.io/advisories/CVE-2026-112257.md) `CVE-2026-112257` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing](https://agentprime.io/advisories/CVE-2026-112260.md) `CVE-2026-112260` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import](https://agentprime.io/advisories/CVE-2026-112259.md) `CVE-2026-112259` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption - [Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser](https://agentprime.io/advisories/CVE-2026-112214.md) `CVE-2026-112214` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Denial of service - [Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service](https://agentprime.io/advisories/CVE-2026-112210.md) `CVE-2026-112210` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.0 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Path traversal Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .