# Red Hat Enterprise Linux 8. Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing](https://agentprime.io/advisories/CVE-2026-0990.md) `CVE-2026-0990` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing](https://agentprime.io/advisories/CVE-2025-14242.md) `CVE-2025-14242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [Libsoup: out-of-bounds read in libsoup websocket frame processing](https://agentprime.io/advisories/CVE-2026-0716.md) `CVE-2026-0716` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption - [Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication](https://agentprime.io/advisories/CVE-2026-0719.md) `CVE-2026-0719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jan 2026 · Tags: Memory corruption - [Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri](https://agentprime.io/advisories/CVE-2025-14946.md) `CVE-2025-14946` · CVE record: Red Hat libnbd and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Command injection - [Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)](https://agentprime.io/advisories/CVE-2025-14523.md) `CVE-2025-14523` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Dec 2025 · Tags: HTTP request smuggling - [Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14512.md) `CVE-2025-14512` · CVE record: GNOME glib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption - [Glib: glib: buffer underflow in gvariant parser leads to heap corruption](https://agentprime.io/advisories/CVE-2025-14087.md) `CVE-2025-14087` · CVE record: GNOME glib and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: Memory corruption - [Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames](https://agentprime.io/advisories/CVE-2025-14104.md) `CVE-2025-14104` · CVE record: util-linux util-linux and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Memory corruption - [Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash](https://agentprime.io/advisories/CVE-2025-66287.md) `CVE-2025-66287` · CVE record: The WebKitGTK Team WebKitGTK and 4 more · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2025 · Tags: Memory corruption - [Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop](https://agentprime.io/advisories/CVE-2025-13947.md) `CVE-2025-13947` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-346 - [Abrt: command-injection in abrt leading to local privilege escalation](https://agentprime.io/advisories/CVE-2025-12744.md) `CVE-2025-12744` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 2 more · CVSS 8.8 High · Not analysed yet · Published 3 Dec 2025 · Tags: Command injection - [Glib: integer overflow in in g_escape_uri_string()](https://agentprime.io/advisories/CVE-2025-13601.md) `CVE-2025-13601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.7 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption - [Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos](https://agentprime.io/advisories/CVE-2025-13502.md) `CVE-2025-13502` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Memory corruption - [Grub2: use-after-free in net_set_vlan](https://agentprime.io/advisories/CVE-2025-54770.md) `CVE-2025-54770` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal_exit command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61664.md) `CVE-2025-61664` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal commands may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61663.md) `CVE-2025-61663` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for gettext command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61662.md) `CVE-2025-61662` · CVE record: GNU grub2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: grub2: out-of-bounds write via malicious usb device](https://agentprime.io/advisories/CVE-2025-61661.md) `CVE-2025-61661` · CVE record: GNU grub2 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: use-after-free in grub_file_close()](https://agentprime.io/advisories/CVE-2025-54771.md) `CVE-2025-54771` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Libvirt: information disclosure via world-readable vm snapshots](https://agentprime.io/advisories/CVE-2025-13193.md) `CVE-2025-13193` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: Broken access control - [Python-kdcproxy: remote dos via unbounded tcp upstream buffering](https://agentprime.io/advisories/CVE-2025-59089.md) `CVE-2025-59089` · CVE record: latchset kdcproxy and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Denial of service - [Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv](https://agentprime.io/advisories/CVE-2025-59088.md) `CVE-2025-59088` · CVE record: latchset kdcproxy and 4 more · CVSS 8.6 High · Not analysed yet · Published 12 Nov 2025 · Tags: Server-side request forgery (SSRF) - [Libvirt: denial of service in xml parsing](https://agentprime.io/advisories/CVE-2025-12748.md) `CVE-2025-12748` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Denial of service - [Samba: command injection in wins server hook script](https://agentprime.io/advisories/CVE-2025-10230.md) `CVE-2025-10230` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 7 Nov 2025 · Tags: Command injection - [Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode](https://agentprime.io/advisories/CVE-2025-12464.md) `CVE-2025-12464` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: use-after-free in xpresentnotify structure creation](https://agentprime.io/advisories/CVE-2025-62229.md) `CVE-2025-62229` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in xkb client resource removal](https://agentprime.io/advisories/CVE-2025-62230.md) `CVE-2025-62230` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: value overflow in xkbsetcompatmap()](https://agentprime.io/advisories/CVE-2025-62231.md) `CVE-2025-62231` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion](https://agentprime.io/advisories/CVE-2025-12105.md) `CVE-2025-12105` · CVE record: GNOME libsoup and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2025 · Tags: Memory corruption - [Luksmeta: data corruption when handling luks1 partitions with luksmeta](https://agentprime.io/advisories/CVE-2025-11568.md) `CVE-2025-11568` · CVE record: Latchset luksmeta and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284 - [Samba: vfs_streams_xattr uninitialized memory write possible](https://agentprime.io/advisories/CVE-2025-9640.md) `CVE-2025-9640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [Libxslt: type confusion in exsltfuncresultcompfunction of libxslt](https://agentprime.io/advisories/CVE-2025-11731.md) `CVE-2025-11731` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md) `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-7493.md) `CVE-2025-7493` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-1220 - [Libsoup: out-of-bounds read in cookie date handling of libsoup http library](https://agentprime.io/advisories/CVE-2025-11021.md) `CVE-2025-11021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: Memory corruption - [Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()](https://agentprime.io/advisories/CVE-2025-60019.md) `CVE-2025-60019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"](https://agentprime.io/advisories/CVE-2025-60018.md) `CVE-2025-60018` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libtiff: libtiff write-what-where](https://agentprime.io/advisories/CVE-2025-9900.md) `CVE-2025-9900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-123 - [Libssh: memory exhaustion via repeated key exchange in libssh](https://agentprime.io/advisories/CVE-2025-8277.md) `CVE-2025-8277` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2025 · Tags: Denial of service - [Libsoup: improper handling of http vary header in libsoup caching](https://agentprime.io/advisories/CVE-2025-9901.md) `CVE-2025-9901` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-524 - [Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()](https://agentprime.io/advisories/CVE-2025-7039.md) `CVE-2025-7039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Sept 2025 · Tags: Path traversal - [Udisks: out-of-bounds read in udisks daemon](https://agentprime.io/advisories/CVE-2025-8067.md) `CVE-2025-8067` · CVE record: storaged-project udisks and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: Memory corruption - [Libssh: write beyond bounds in binary to base64 conversion functions](https://agentprime.io/advisories/CVE-2025-4877.md) `CVE-2025-4877` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Memory corruption - [Shim: expired secure boot certificate](https://agentprime.io/advisories/CVE-2023-5342.md) `CVE-2023-5342` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.1 Medium · Not analysed yet · Published 15 Aug 2025 · Tags: CWE-324 - [Linux-pam: incomplete fix for cve-2025-6020](https://agentprime.io/advisories/CVE-2025-8941.md) `CVE-2025-8941` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Aug 2025 · Tags: Path traversal - [Kernel: deadlock in ksmbd_find_crypto_ctx()](https://agentprime.io/advisories/CVE-2023-32253.md) `CVE-2023-32253` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: CWE-413 - [Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type](https://agentprime.io/advisories/CVE-2023-32255.md) `CVE-2023-32255` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2025 · Tags: Denial of service - [Kernel: ksmbd race issue from smb2 close and logoff with multichannel](https://agentprime.io/advisories/CVE-2023-32256.md) `CVE-2023-32256` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-421 - [Kernel: ksmbd brute force delay bypass via asynchronous requests](https://agentprime.io/advisories/CVE-2023-32251.md) `CVE-2023-32251` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2025 · Tags: Authentication bypass - [Kernel: ksmbd memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-2593.md) `CVE-2023-2593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: Denial of service - [Glib: glib crash after long command line](https://agentprime.io/advisories/CVE-2025-4056.md) `CVE-2025-4056` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2025 · Tags: Code injection - [Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service](https://agentprime.io/advisories/CVE-2025-5449.md) `CVE-2025-5449` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: Memory corruption - [Libssh: null pointer dereference in libssh kex session id calculation](https://agentprime.io/advisories/CVE-2025-8114.md) `CVE-2025-8114` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Memory corruption - [Pam-config: lpe from unprivileged to allow_active in pam](https://agentprime.io/advisories/CVE-2025-6018.md) `CVE-2025-6018` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2025 · Tags: Broken access control - [Libssh: use of uninitialized variable in privatekey_from_file()](https://agentprime.io/advisories/CVE-2025-4878.md) `CVE-2025-4878` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.6 Low · Not analysed yet · Published 22 Jul 2025 · Tags: Memory corruption - [Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write](https://agentprime.io/advisories/CVE-2025-7519.md) `CVE-2025-7519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Jul 2025 · Tags: Memory corruption - [Gnutls: null pointer dereference in \_gnutls_figure_common_ciphersuite()](https://agentprime.io/advisories/CVE-2025-6395.md) `CVE-2025-6395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .