RH
Product
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
On CISA KEVExploited in the wild
368
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 78High 241Medium 48Low 1
Watch
Add Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12299 | 5.4 | Jun 16 | JIT miscompilation in the DOM: Core & HTML component Affected: All versions, or not specified |
| CVE-2026-12298 | 5.4 | Jun 16 | Memory safety bug fixed in Thunderbird 152 Affected: All versions, or not specified |
| CVE-2026-15588 | 5.3 | Jul 20 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected: All versions, or not specified |
| CVE-2026-12329 | 5.3 | Jun 16 | Memory safety bug fixed in Thunderbird ESR 140.12 Affected: All versions, or not specified |
| CVE-2026-42015 | 5.3 | May 26 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected: All versions, or not specified |
| CVE-2026-8391 | 5.3 | May 12 | Other issue in the JavaScript Engine component Affected: All versions, or not specified |
| CVE-2026-42258 | 5.3 | May 9 | net-imap: Command Injection via unvalidated Symbol inputs Affected: All versions, or not specified |
| CVE-2025-14831 | 5.3 | Feb 9 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2024-12133 | 5.3 | Feb 10 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos Affected: All versions, or not specified |
| CVE-2026-23868 | 5.1 | Mar 10 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: All versions, or not specified |
| CVE-2026-42006 | 4.3 | May 12 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP Affected: All versions, or not specified |
| CVE-2026-28901 | 4.3 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20664 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28859 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20635 | 4.3 | Feb 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-4519 | 3.3 | Mar 20 | webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified |