Red Hat Enterprise Linux 8.2 Advanced Update Support
112 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Red Hat Enterprise Linux 8.2 Advanced Update Support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Enterprise Linux 8.2 Advanced Update Support CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 2 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 2 |
| 2025-02 | 10 |
| 2025-03 | 1 |
| 2025-04 | 11 |
| 2025-05 | 6 |
| 2025-06 | 13 |
| 2025-07 | 2 |
| 2025-08 | 2 |
| 2025-09 | 3 |
| 2025-10 | 4 |
| 2025-11 | 5 |
| 2025-12 | 3 |
| 2026-01 | 2 |
| 2026-02 | 2 |
| 2026-03 | 3 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 112 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical7
- High83
- Medium20
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 8.2 Advanced Update Support.
- CVE-2026-5201Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image7.5
- CVE-2026-5121Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing7.5
- CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing7.5
- CVE-2025-14905389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow7.2
- CVE-2026-1761Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response8.6
- CVE-2025-14242Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing6.5
- CVE-2026-0719Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication8.6
- CVE-2025-14523Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)8.2
- CVE-2025-66287Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash8.8
- CVE-2025-13947Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop7.4
- CVE-2025-13601Glib: integer overflow in in g_escape_uri_string()7.7
- CVE-2025-13502Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos7.5
- CVE-2025-61662Grub2: missing unregister call for gettext command may lead to use-after-free7.8
- CVE-2025-59089Python-kdcproxy: remote dos via unbounded tcp upstream buffering5.9
- CVE-2025-59088Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv8.6
Product grouping is registry-driven, with AI assist and human review. How it works