# Red Hat Enterprise Linux 8. Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain](https://agentprime.io/advisories/CVE-2026-10028.md) `CVE-2026-10028` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: Denial of service - [Samba: remote code execution in samr](https://agentprime.io/advisories/CVE-2026-4408.md) `CVE-2026-4408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2026 · Tags: Command injection - [Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command](https://agentprime.io/advisories/CVE-2026-44604.md) `CVE-2026-44604` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 May 2026 · Tags: Command injection - [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md) `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md) `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280 - [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md) `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345 - [Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling](https://agentprime.io/advisories/CVE-2026-42015.md) `CVE-2026-42015` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-193 - [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md) `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans](https://agentprime.io/advisories/CVE-2026-42012.md) `CVE-2026-42012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: information disclosure via heap overread in rsa key exchange](https://agentprime.io/advisories/CVE-2026-5260.md) `CVE-2026-5260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-126 - [Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data](https://agentprime.io/advisories/CVE-2026-48864.md) `CVE-2026-48864` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption - [Samba: samba: remote code execution in printing subsystem via unescaped job description](https://agentprime.io/advisories/CVE-2026-4480.md) `CVE-2026-4480` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 26 May 2026 · Tags: Command injection - [Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file](https://agentprime.io/advisories/CVE-2026-9149.md) `CVE-2026-9149` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums](https://agentprime.io/advisories/CVE-2026-9150.md) `CVE-2026-9150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)](https://agentprime.io/advisories/CVE-2026-9064.md) `CVE-2026-9064` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2026 · Tags: Denial of service - [Gnutls: gnutls: denial of service via dtls packet reordering vulnerability](https://agentprime.io/advisories/CVE-2026-42009.md) `CVE-2026-42009` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-475 - [Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui](https://agentprime.io/advisories/CVE-2026-4802.md) `CVE-2026-4802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection - [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md) `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS - [Gnutls: gnutls: authentication bypass via nul character in username](https://agentprime.io/advisories/CVE-2026-42010.md) `CVE-2026-42010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-170, CWE-626 - [Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling](https://agentprime.io/advisories/CVE-2026-34002.md) `CVE-2026-34002` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.](https://agentprime.io/advisories/CVE-2026-34000.md) `CVE-2026-34000` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly](https://agentprime.io/advisories/CVE-2026-33846.md) `CVE-2026-33846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-130 - [Gnutls: gnutls: denial of service via dtls zero-length fragment](https://agentprime.io/advisories/CVE-2026-33845.md) `CVE-2026-33845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Memory corruption - [Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response](https://agentprime.io/advisories/CVE-2026-3832.md) `CVE-2026-3832` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-179 - [Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison](https://agentprime.io/advisories/CVE-2026-3833.md) `CVE-2026-3833` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-178 - [Libxml2: libxml2: denial of service via crafted xsd-validated document](https://agentprime.io/advisories/CVE-2026-6732.md) `CVE-2026-6732` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Libsoup: libsoup: http request smuggling via duplicate content-length headers](https://agentprime.io/advisories/CVE-2026-2708.md) `CVE-2026-2708` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 23 Apr 2026 · Tags: HTTP request smuggling - [Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access](https://agentprime.io/advisories/CVE-2026-34003.md) `CVE-2026-34003` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption](https://agentprime.io/advisories/CVE-2026-34001.md) `CVE-2026-34001` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling](https://agentprime.io/advisories/CVE-2026-33999.md) `CVE-2026-33999` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Webkitgtk: authorization bypass through webpage::send-request signal handler](https://agentprime.io/advisories/CVE-2025-66286.md) `CVE-2025-66286` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Broken access control - [Libopensc: opensc: multiple uses of uninitialized variable](https://agentprime.io/advisories/CVE-2025-13763.md) `CVE-2025-13763` · CVE record: OpenSC OpenSC and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Efivar: efivar: denial of service due to stack overflow in device path node parsing](https://agentprime.io/advisories/CVE-2026-6862.md) `CVE-2026-6862` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service - [Emacs: emacs: memory corruption vulnerability when processing svg css](https://agentprime.io/advisories/CVE-2026-6861.md) `CVE-2026-6861` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-193 - [Binutils: binutils: arbitrary code execution via malformed xcoff object file processing](https://agentprime.io/advisories/CVE-2026-6846.md) `CVE-2026-6846` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files](https://agentprime.io/advisories/CVE-2026-6844.md) `CVE-2026-6844` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service - [Nano: nano: format string vulnerability leads to denial of service](https://agentprime.io/advisories/CVE-2026-6843.md) `CVE-2026-6843` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Binutils: binutils: denial of service via crafted elf file](https://agentprime.io/advisories/CVE-2026-6845.md) `CVE-2026-6845` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption - [Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions](https://agentprime.io/advisories/CVE-2026-6842.md) `CVE-2026-6842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 22 Apr 2026 · Tags: Broken access control - [Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing](https://agentprime.io/advisories/CVE-2026-6507.md) `CVE-2026-6507` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing](https://agentprime.io/advisories/CVE-2026-6384.md) `CVE-2026-6384` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.3 High · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via specially crafted seattle filmworks file](https://agentprime.io/advisories/CVE-2026-40919.md) `CVE-2026-40919` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via crafted pvr image file](https://agentprime.io/advisories/CVE-2026-40918.md) `CVE-2026-40918` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: application crashes or information disclosure via crafted icns image files](https://agentprime.io/advisories/CVE-2026-40917.md) `CVE-2026-40917` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.0 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service due to stack buffer overflow in tim image loader](https://agentprime.io/advisories/CVE-2026-40916.md) `CVE-2026-40916` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.0 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader](https://agentprime.io/advisories/CVE-2026-40915.md) `CVE-2026-40915` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Sssd: out-of-bounds read in the sssd](https://agentprime.io/advisories/CVE-2026-6245.md) `CVE-2026-6245` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder](https://agentprime.io/advisories/CVE-2026-1584.md) `CVE-2026-1584` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption - [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md) `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition - [Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows](https://agentprime.io/advisories/CVE-2025-14821.md) `CVE-2025-14821` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-427 - [Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection](https://agentprime.io/advisories/CVE-2026-4631.md) `CVE-2026-4631` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 7 Apr 2026 · Tags: Command injection - [Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive](https://agentprime.io/advisories/CVE-2026-5745.md) `CVE-2026-5745` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Memory corruption - [Tar: tar: hidden file injection via crafted archives](https://agentprime.io/advisories/CVE-2026-5704.md) `CVE-2026-5704` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Unrestricted file upload - [Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing](https://agentprime.io/advisories/CVE-2026-5673.md) `CVE-2026-5673` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Memory corruption - [Util-linux: util-linux: access control bypass due to improper hostname canonicalization](https://agentprime.io/advisories/CVE-2026-3184.md) `CVE-2026-3184` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-289 - [Libinput: libinput: information disclosure via dangling pointer in lua plugin handling](https://agentprime.io/advisories/CVE-2026-35094.md) `CVE-2026-35094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins](https://agentprime.io/advisories/CVE-2026-35093.md) `CVE-2026-35093` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 8.8 High · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [Corosync: corosync: denial of service via integer overflow in join message validation](https://agentprime.io/advisories/CVE-2026-35092.md) `CVE-2026-35092` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Corosync: corosync: denial of service and information disclosure via crafted udp packet](https://agentprime.io/advisories/CVE-2026-35091.md) `CVE-2026-35091` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-253 - [Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image](https://agentprime.io/advisories/CVE-2026-5201.md) `CVE-2026-5201` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .