RH
Product
Red Hat Enterprise Linux 8.2 Advanced Update Support
On CISA KEVExploited in the wild
171
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 49High 107Medium 13Low 2
Watch
Add Red Hat Enterprise Linux 8.2 Advanced Update Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49179 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension Affected: All versions, or not specified |
| CVE-2025-49176 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension Affected: All versions, or not specified |
| CVE-2025-48798 | 7.3 | May 27 | Gimp: multiple use after free in xcf parser Affected: All versions, or not specified |
| CVE-2025-48797 | 7.3 | May 27 | Gimp: multiple heap buffer overflows in tga parser Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
| CVE-2025-6019 | 7.0 | Jun 19 | Libblockdev: lpe from allow_active to root in libblockdev via udisks Affected: All versions, or not specified |
| CVE-2025-46421 | 6.8 | Apr 24 | Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server Affected: All versions, or not specified |
| CVE-2026-33983 | 6.5 | Mar 30 | FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS Affected: All versions, or not specified |
| CVE-2025-14242 | 6.5 | Jan 14 | Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing Affected: All versions, or not specified |
| CVE-2025-46420 | 6.5 | Apr 24 | Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c Affected: All versions, or not specified |
| CVE-2025-2784 | 6.5 | Apr 3 | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content Affected: All versions, or not specified |
| CVE-2025-49175 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors Affected: All versions, or not specified |
| CVE-2025-59089 | 5.9 | Nov 12 | Python-kdcproxy: remote dos via unbounded tcp upstream buffering Affected: All versions, or not specified |
| CVE-2025-3576 | 5.9 | Apr 15 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions Affected: All versions, or not specified |
| CVE-2025-49178 | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore Affected: All versions, or not specified |
| CVE-2023-4459 | 5.5 | Aug 21 | Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() Affected: All versions, or not specified |
| CVE-2025-5318 | 5.4 | Jun 24 | Libssh: out-of-bounds read in sftp_handle() Affected: All versions, or not specified |
| CVE-2026-23868 | 5.1 | Mar 10 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: All versions, or not specified |
| CVE-2025-4945 | 3.7 | May 19 | Libsoup: integer overflow in cookie expiration date handling in libsoup Affected: All versions, or not specified |
| CVE-2026-4519 | 3.3 | Mar 20 | webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified |
