RH
Product
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
On CISA KEVExploited in the wild
352
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 78High 229Medium 44Low 1
Watch
Add Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2026-46300 In wildKEV | 7.8 | May 23 | net: skbuff: preserve shared-frag marker during coalescing Affected: All versions, or not specified |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: All versions, or not specified |
| CVE-2026-87766 | 8.8 | Sep 9 | Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup Affected: All versions, or not specified |
| CVE-2026-84268 | 8.8 | Sep 1 | Gvfs: sftp: heap-based buffer overflow in read_reply() Affected: All versions, or not specified |
| CVE-2026-16526 | 8.8 | Jul 30 | Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability Affected: All versions, or not specified |
| CVE-2026-11610 | 8.8 | Jul 7 | 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind Affected: All versions, or not specified |
| CVE-2026-14474 | 8.8 | Jul 7 | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation Affected: All versions, or not specified |
| CVE-2026-53071 | 8.8 | Jun 24 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp Affected: All versions, or not specified |
| CVE-2026-12291 | 8.8 | Jun 16 | Use-after-free in the Networking: HTTP component Affected: All versions, or not specified |
| CVE-2026-12289 | 8.8 | Jun 16 | Privilege escalation in the Graphics: WebRender component Affected: All versions, or not specified |
| CVE-2026-52720 | 8.8 | Jun 15 | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb Affected: All versions, or not specified |
| CVE-2026-43503 | 8.8 | May 23 | net: skbuff: propagate shared-frag marker through frag-transfer helpers Affected: All versions, or not specified |
| CVE-2026-8975 | 8.8 | May 19 | Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151 Affected: All versions, or not specified |
| CVE-2026-6477 | 8.8 | May 14 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory Affected: All versions, or not specified |
| CVE-2026-6473 | 8.8 | May 14 | PostgreSQL server undersizes allocations, via integer wraparound Affected: All versions, or not specified |
| CVE-2026-28947 | 8.8 | May 11 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2026-28847 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28955 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-43284 | 8.8 | May 8 | xfrm: esp: avoid in-place decrypt on shared skb frags Affected: All versions, or not specified |
| CVE-2026-25243 | 8.8 | May 5 | redis-server RESTORE invalid memory access may allow remote code execution Affected: All versions, or not specified |
| CVE-2026-41651 | 8.8 | Apr 22 | PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root Affected: All versions, or not specified |
| CVE-2026-6750 | 8.8 | Apr 21 | Privilege escalation in the Graphics: WebRender component Affected: All versions, or not specified |
| CVE-2026-27140 | 8.8 | Apr 8 | Code execution vulnerability in SWIG code generation in cmd/go Affected: All versions, or not specified |
| CVE-2026-3083 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-3085 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-26965 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-26955 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-2769 | 8.8 | Feb 24 | Use-after-free in the Storage: IndexedDB component Affected: All versions, or not specified |
| CVE-2026-2044 | 8.8 | Feb 20 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-0797 | 8.8 | Feb 20 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2447 | 8.8 | Feb 16 | Heap buffer overflow in libvpx Affected: All versions, or not specified |
| CVE-2026-2006 | 8.8 | Feb 12 | PostgreSQL missing validation of multibyte character length executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2005 | 8.8 | Feb 12 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2004 | 8.8 | Feb 12 | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-0882 | 8.8 | Jan 13 | Use-after-free in the IPC component Affected: All versions, or not specified |
| CVE-2026-0880 | 8.8 | Jan 13 | Sandbox escape due to integer overflow in the Graphics component Affected: All versions, or not specified |
| CVE-2025-66287 | 8.8 | Dec 4 | Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash Affected: All versions, or not specified |
| CVE-2025-11561 | 8.8 | Oct 9 | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems Affected: All versions, or not specified |
| CVE-2025-9900 | 8.8 | Sep 23 | Libtiff: libtiff write-what-where Affected: All versions, or not specified |
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: All versions, or not specified |
| CVE-2026-10649 | 8.6 | Jun 16 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression Affected: All versions, or not specified |
| CVE-2026-4690 | 8.6 | Mar 24 | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component Affected: All versions, or not specified |
| CVE-2026-4687 | 8.6 | Mar 24 | Sandbox escape due to incorrect boundary conditions in the Telemetry component Affected: All versions, or not specified |
| CVE-2025-61732 | 8.6 | Feb 5 | Potential code smuggling via doc comments in cmd/cgo Affected: All versions, or not specified |
| CVE-2026-1761 | 8.6 | Feb 2 | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response Affected: All versions, or not specified |
| CVE-2026-0719 | 8.6 | Jan 8 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication Affected: All versions, or not specified |
| CVE-2025-59088 | 8.6 | Nov 12 | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv Affected: All versions, or not specified |
| CVE-2026-58013 | 8.2 | Jun 30 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected: All versions, or not specified |
| CVE-2026-58012 | 8.2 | Jun 30 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected: All versions, or not specified |