RH
Product
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
On CISA KEVExploited in the wild
192
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 55High 119Medium 18Low 1
Watch
Add Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23490 | 7.5 | Jan 16 | pyasn1 has a DoS vulnerability in decoder Affected: All versions, or not specified |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) Affected: All versions, or not specified |
| CVE-2025-13502 | 7.5 | Nov 25 | Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos Affected: All versions, or not specified |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: All versions, or not specified |
| CVE-2024-8176 | 7.5 | Mar 14 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat Affected: All versions, or not specified |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: All versions, or not specified |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: All versions, or not specified |
| CVE-2026-4371 | 7.4 | Mar 24 | Out of bounds read in IMAP parsing Affected: All versions, or not specified |
| CVE-2025-13947 | 7.4 | Dec 3 | Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop Affected: All versions, or not specified |
| CVE-2024-11614 | 7.4 | Dec 18 | Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library Affected: All versions, or not specified |
| CVE-2026-6753 | 7.3 | Apr 21 | Incorrect boundary conditions in the WebRTC component Affected: All versions, or not specified |
| CVE-2026-6752 | 7.3 | Apr 21 | Incorrect boundary conditions in the WebRTC component Affected: All versions, or not specified |
| CVE-2026-6751 | 7.3 | Apr 21 | Uninitialized memory in the Audio/Video: Web Codecs component Affected: All versions, or not specified |
| CVE-2026-33412 | 7.3 | Mar 24 | Vim affected by Command injection via newline in glob() Affected: All versions, or not specified |
| CVE-2026-2045 | 7.3 | Feb 20 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
| CVE-2026-46333 | 7.1 | May 15 | ptrace: slightly saner 'get_dumpable()' logic Affected: All versions, or not specified |
| CVE-2026-4786 | 7.1 | Apr 13 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() Affected: All versions, or not specified |
| CVE-2026-4887 | 7.1 | Mar 26 | Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image Affected: All versions, or not specified |