CVE Tools
Track your stack

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

236 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support CVEs per month
MonthCVEs
2024-120
2025-012
2025-0211
2025-031
2025-0411
2025-056
2025-0614
2025-073
2025-082
2025-094
2025-105
2025-115
2025-125
2026-012
2026-023
2026-036
2026-047
2026-0514
2026-0633
2026-0716
2026-0817
2026-0919
2026-101
2026-110

Severity

How the 236 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical125%
  • High17172%
  • Medium5021%
  • Low31%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.

  1. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  2. CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6
  3. CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6
  4. CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassembly8.6
  5. CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6
  6. CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
  7. CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
  8. CVE-2026-86320Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)7.8
  9. CVE-2026-18147Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url8.1
  10. CVE-2026-87766Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup8.8
  11. CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindings8.5
  12. CVE-2026-76561Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)7.2
  13. CVE-2026-18922389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property9.8
  14. CVE-2026-18453389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search7.5
  15. CVE-2026-18355389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()7.5

Product grouping is registry-driven, with AI assist and human review. How it works