CVE Tools
Track your stack

Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions

177 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions CVEs per month
MonthCVEs
2024-120
2025-011
2025-021
2025-031
2025-042
2025-055
2025-0614
2025-073
2025-082
2025-095
2025-105
2025-115
2025-125
2026-012
2026-023
2026-036
2026-048
2026-0518
2026-0634
2026-0716
2026-0818
2026-0921
2026-101
2026-110

Severity

How the 177 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical95%
  • High12872%
  • Medium3821%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions.

  1. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  2. CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6
  3. CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6
  4. CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassembly8.6
  5. CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6
  6. CVE-2026-96280Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems7.5
  7. CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
  8. CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extraction8.8
  9. CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
  10. CVE-2026-86320Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)7.8
  11. CVE-2026-18147Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url8.1
  12. CVE-2026-87766Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup8.8
  13. CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindings8.5
  14. CVE-2026-76561Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)7.2
  15. CVE-2026-18922389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property9.8

Product grouping is registry-driven, with AI assist and human review. How it works