Known vulnerabilities in Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-13502	Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos	7.5 High	Nov 25, 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 High	Nov 18, 2025
CVE-2025-59089	If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g	5.9 Medium	Nov 12, 2025
CVE-2025-59088	Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv	8.6 High	Nov 12, 2025
CVE-2025-43457	A use-after-free issue was addressed with improved memory management	6.5 Medium	Nov 4, 2025
CVE-2025-43441	The issue was addressed with improved memory handling	4.3 Medium	Nov 4, 2025
CVE-2025-43438	A use-after-free issue was addressed with improved memory management	4.3 Medium	Nov 4, 2025
CVE-2025-43433	The issue was addressed with improved memory handling	8.8 High	Nov 4, 2025
CVE-2025-62229	Xorg: xmayland: use-after-free in xpresentnotify structure creation	7.3 High	Oct 30, 2025
CVE-2025-62230	Xorg: xwayland: use-after-free in xkb client resource removal	7.3 High	Oct 30, 2025
CVE-2025-62231	Xorg: xmayland: value overflow in xkbsetcompatmap()	7.3 High	Oct 30, 2025
CVE-2025-11561	Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems	8.8 High	Oct 9, 2025
CVE-2025-11234	Qemu-kvm: vnc websocket handshake use-after-free	7.5 High	Oct 3, 2025
CVE-2025-7493	A privilege escalation flaw from host to domain administrator was found in FreeIPA	9.1 Critical	Sep 30, 2025
CVE-2025-11021	Libsoup: out-of-bounds read in cookie date handling of libsoup http library	7.5 High	Sep 26, 2025
CVE-2025-10911	Libxslt: use-after-free with key data stored cross-rvt	5.5 Medium	Sep 25, 2025
CVE-2025-9900	Libtiff: libtiff write-what-where	8.8 High	Sep 23, 2025
CVE-2025-8067	Udisks: out-of-bounds read in udisks daemon	8.5 High	Aug 28, 2025
CVE-2025-8941	A flaw was found in linux-pam	7.8 High	Aug 13, 2025
CVE-2025-43214	The issue was addressed with improved memory handling	6.5 Medium	Jul 29, 2025
CVE-2025-31277	Exploited Apple Multiple Products Buffer Overflow Vulnerability	8.8 High	Jul 29, 2025
CVE-2025-43213	The issue was addressed with improved memory handling	6.5 Medium	Jul 29, 2025
CVE-2025-7425	Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr	7.8 High	Jul 10, 2025
CVE-2025-7345	Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf	7.5 High	Jul 8, 2025
CVE-2025-5372	Libssh: incorrect return code handling in ssh_kdf() in libssh	5.0 Medium	Jul 4, 2025

Other Red Hat products