RH
Product
Red Hat Enterprise Linux 8.2 Advanced Update Support
On CISA KEVExploited in the wild
134
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 47High 80Medium 6Low 1
Watch
Add Red Hat Enterprise Linux 8.2 Advanced Update Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2026-3083 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-3085 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-43010 | 8.8 | Mar 12 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-26965 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-26955 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-2769 | 8.8 | Feb 24 | Use-after-free in the Storage: IndexedDB component Affected: All versions, or not specified |
| CVE-2026-2044 | 8.8 | Feb 20 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-0797 | 8.8 | Feb 20 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2447 | 8.8 | Feb 16 | Heap buffer overflow in libvpx Affected: All versions, or not specified |
| CVE-2026-2006 | 8.8 | Feb 12 | PostgreSQL missing validation of multibyte character length executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2005 | 8.8 | Feb 12 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2004 | 8.8 | Feb 12 | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-0882 | 8.8 | Jan 13 | Use-after-free in the IPC component Affected: All versions, or not specified |
| CVE-2026-0880 | 8.8 | Jan 13 | Sandbox escape due to integer overflow in the Graphics component Affected: All versions, or not specified |
| CVE-2025-66287 | 8.8 | Dec 4 | Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash Affected: All versions, or not specified |
| CVE-2025-11561 | 8.8 | Oct 9 | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems Affected: All versions, or not specified |
| CVE-2025-9900 | 8.8 | Sep 23 | Libtiff: libtiff write-what-where Affected: All versions, or not specified |
| CVE-2023-5178 | 8.8 | Nov 1 | Kernel: use after free in nvmet_tcp_free_crypto in nvme Affected: All versions, or not specified |
| CVE-2023-39417 | 8.8 | Aug 11 | Postgresql: extension script @substitutions@ within quoting allow sql injection Affected: All versions, or not specified |
| CVE-2026-4690 | 8.6 | Mar 24 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component Affected: All versions, or not specified |
| CVE-2026-4687 | 8.6 | Mar 24 | Sandbox escape due to incorrect boundary conditions in the Telemetry component Affected: All versions, or not specified |
| CVE-2025-61732 | 8.6 | Feb 5 | Potential code smuggling via doc comments in cmd/cgo Affected: All versions, or not specified |
| CVE-2026-1761 | 8.6 | Feb 2 | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response Affected: All versions, or not specified |
| CVE-2026-0719 | 8.6 | Jan 8 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication Affected: All versions, or not specified |
| CVE-2025-59088 | 8.6 | Nov 12 | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv Affected: All versions, or not specified |
| CVE-2026-26740 | 8.2 | Mar 18 | Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension… Affected: All versions, or not specified |
| CVE-2025-14523 | 8.2 | Dec 11 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) Affected: All versions, or not specified |
| CVE-2026-25646 | 8.1 | Feb 10 | LIBPNG has a heap buffer overflow in png_set_quantize Affected: All versions, or not specified |
| CVE-2026-0891 | 8.1 | Jan 13 | Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 Affected: All versions, or not specified |
| CVE-2026-0877 | 8.1 | Jan 13 | Mitigation bypass in the DOM: Security component Affected: All versions, or not specified |
| CVE-2026-0878 | 8.0 | Jan 13 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component Affected: All versions, or not specified |
| CVE-2026-2921 | 7.8 | Mar 13 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-3082 | 7.8 | Mar 13 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-27622 | 7.8 | Mar 3 | OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write Affected: All versions, or not specified |
| CVE-2026-2048 | 7.8 | Feb 20 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-25506 | 7.8 | Feb 10 | MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery Affected: All versions, or not specified |
| CVE-2026-23074 | 7.8 | Feb 4 | net/sched: Enforce that teql can only be used as root qdisc Affected: All versions, or not specified |
| CVE-2025-61731 | 7.8 | Jan 28 | Arbitrary file write using cgo pkg-config directive in cmd/go Affected: All versions, or not specified |
| CVE-2025-61662 | 7.8 | Nov 18 | Grub2: missing unregister call for gettext command may lead to use-after-free Affected: All versions, or not specified |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: All versions, or not specified |
| CVE-2025-6020 | 7.8 | Jun 17 | Linux-pam: linux-pam directory traversal Affected: All versions, or not specified |
| CVE-2025-5914 | 7.8 | Jun 9 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c Affected: All versions, or not specified |
| CVE-2023-42753 | 7.8 | Sep 25 | Kernel: netfilter: potential slab-out-of-bound access due to integer underflow Affected: All versions, or not specified |
| CVE-2023-4004 | 7.8 | Jul 31 | Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() Affected: All versions, or not specified |
| CVE-2025-13601 | 7.7 | Nov 26 | Glib: integer overflow in in g_escape_uri_string() Affected: All versions, or not specified |
| CVE-2025-0624 | 7.6 | Feb 19 | Grub2: net: out-of-bounds write in grub_net_search_config_file() Affected: All versions, or not specified |
| CVE-2026-22016 | 7.5 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2026-5201 | 7.5 | Mar 31 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image Affected: All versions, or not specified |
| CVE-2026-33984 | 7.5 | Mar 30 | FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write Affected: All versions, or not specified |
