RH
Product
Red Hat Enterprise Linux 8.2 Advanced Update Support
On CISA KEVExploited in the wild
136
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 47High 82Medium 6Low 1
Watch
Add Red Hat Enterprise Linux 8.2 Advanced Update Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5201 | 7.5 | Mar 31 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image Affected: All versions, or not specified |
| CVE-2026-33984 | 7.5 | Mar 30 | FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write Affected: All versions, or not specified |
| CVE-2026-5121 | 7.5 | Mar 30 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing Affected: All versions, or not specified |
| CVE-2026-4699 | 7.5 | Mar 24 | Incorrect boundary conditions in the Layout: Text and Fonts component Affected: All versions, or not specified |
| CVE-2026-4697 | 7.5 | Mar 24 | Incorrect boundary conditions in the Audio/Video: Web Codecs component Affected: All versions, or not specified |
| CVE-2026-4695 | 7.5 | Mar 24 | Incorrect boundary conditions in the Audio/Video: Web Codecs component Affected: All versions, or not specified |
| CVE-2026-4694 | 7.5 | Mar 24 | Incorrect boundary conditions, integer overflow in the Graphics component Affected: All versions, or not specified |
| CVE-2026-4693 | 7.5 | Mar 24 | Incorrect boundary conditions in the Audio/Video: Playback component Affected: All versions, or not specified |
| CVE-2026-4686 | 7.5 | Mar 24 | Incorrect boundary conditions in the Graphics: Canvas2D component Affected: All versions, or not specified |
| CVE-2026-4685 | 7.5 | Mar 24 | Incorrect boundary conditions in the Graphics: Canvas2D component Affected: All versions, or not specified |
| CVE-2026-4684 | 7.5 | Mar 24 | Race condition, use-after-free in the Graphics: WebRender component Affected: All versions, or not specified |
| CVE-2026-4424 | 7.5 | Mar 19 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing Affected: All versions, or not specified |
| CVE-2026-27135 | 7.5 | Mar 18 | nghttp2 Denial of service: Assertion failure due to the missing state validation Affected: All versions, or not specified |
| CVE-2026-25679 | 7.5 | Mar 6 | Incorrect parsing of IPv6 host literals in net/url Affected: All versions, or not specified |
| CVE-2025-61726 | 7.5 | Jan 28 | Memory exhaustion in query parameter parsing in net/url Affected: All versions, or not specified |
| CVE-2026-21945 | 7.5 | Jan 20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: All versions, or not specified |
| CVE-2026-23490 | 7.5 | Jan 16 | pyasn1 has a DoS vulnerability in decoder Affected: All versions, or not specified |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) Affected: All versions, or not specified |
| CVE-2025-13502 | 7.5 | Nov 25 | Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos Affected: All versions, or not specified |
| CVE-2025-11021 | 7.5 | Sep 26 | Libsoup: out-of-bounds read in cookie date handling of libsoup http library Affected: All versions, or not specified |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: All versions, or not specified |
| CVE-2024-8176 | 7.5 | Mar 14 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat Affected: All versions, or not specified |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: All versions, or not specified |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: All versions, or not specified |
| CVE-2026-4371 | 7.4 | Mar 24 | Out of bounds read in IMAP parsing Affected: All versions, or not specified |
| CVE-2025-13947 | 7.4 | Dec 3 | Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop Affected: All versions, or not specified |
| CVE-2026-33412 | 7.3 | Mar 24 | Vim affected by Command injection via newline in glob() Affected: All versions, or not specified |
| CVE-2026-2045 | 7.3 | Feb 20 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-62229 | 7.3 | Oct 30 | Xorg: xmayland: use-after-free in xpresentnotify structure creation Affected: All versions, or not specified |
| CVE-2025-62230 | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal Affected: All versions, or not specified |
| CVE-2025-62231 | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
