Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +16 more +18 moreForge has signature forgery in Ed25519 due to missing S > L checkCVE-2026-33895Fix available7.5 High
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +22 more +24 moreForge has signature forgery in RSA-PKCS due to ASN.1 extra fieldCVE-2026-33894Fix available7.5 High
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +17 more +19 moreForge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero InputCVE-2026-33891Fix available7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: denial of service via use-after-free in soupserver during tls handshakeCVE-2026-2436Fix available6.5 Medium
- path-to-regexp, red hat cryostat 4, cryostat 4 on rhel 9 +49 more +51 morepath-to-regexp vulnerable to Denial of Service via sequential optional groupsCVE-2026-4926Fix available7.5 High
- nodejs node, node.js, red hat enterprise linux 10 +7 more +9 moreA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...CVE-2026-21710Public exploitFix availableEPSS 25.4%7.5 High
- freedesktop polkit, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePolkit: polkit: denial of service via unbounded input processing through standard inputCVE-2026-4897Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGimp: gimp:memory disclosure and denial of service via specially crafted pcx imageCVE-2026-4887Fix available6.1 Medium
- squid-cache squid, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreSquid vulnerable to Denial of Service in ICP Request handlingCVE-2026-33526Fix available9.2 Critical
- squid-cache squid, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreSquid has Denial of Service in ICP Response handlingCVE-2026-32748Fix available8.7 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP XPM File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2026-4154Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-4153Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP ANI File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2026-4151Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP PSD File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2026-4150Fix available7.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...CVE-2026-20664Fix available4.3 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...CVE-2026-28859Fix available4.3 Medium
- apple ipados, macos, safari +7 more +9 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 26.4,...CVE-2026-28861Fix available4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...CVE-2026-28857Fix available6.5 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreMemory leak in code preparing DNSSEC proofs of non-existenceCVE-2026-3104Fix available7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +25 more +27 moreExcessive NSEC3 iterations cause high CPU load during insecure delegation validationCVE-2026-1519Fix available7.5 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile methodCVE-2025-67030Fix available8.8 High
- mozilla thunderbird, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreOut of bounds read in IMAP parsingCVE-2026-4371Fix available7.4 High
- libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 moreLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingCVE-2026-4775Fix available7.8 High
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +9 more +11 moreNGINX ngx_mail_auth_http_module vulnerabilityCVE-2026-27651Fix available8.7 High
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +9 more +11 moreNGINX ngx_http_dav_module vulnerabilityCVE-2026-27654Public exploitFix availableEPSS 26.5%8.8 High
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +10 more +12 moreNGINX ngx_http_mp4_module vulnerabilityCVE-2026-32647Fix available8.5 High
- f5 nginx open source, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreNGINX ngx_http_mp4_module vulnerabilityCVE-2026-27784Fix available8.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149 and Thunderbird 149CVE-2026-47299.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149CVE-2026-4721Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149CVE-2026-4720Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the Networking: HTTP componentCVE-2026-4700Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Layout: Text and Fonts componentCVE-2026-4699Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-4698Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4697Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Layout: Text and Fonts componentCVE-2026-4696Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-4695Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions, integer overflow in the Graphics componentCVE-2026-4694Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Playback componentCVE-2026-4693Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Responsive Design Mode componentCVE-2026-4692Public exploitFix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the CSS Parsing and Computation componentCVE-2026-4691Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4690Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentCVE-2026-4689Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to use-after-free in the Disability Access APIs componentCVE-2026-4688Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry componentCVE-2026-4687Fix available8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4686Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: Canvas2D componentCVE-2026-4685Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreRace condition, use-after-free in the Graphics: WebRender componentCVE-2026-4684Fix available7.5 High
- gstreamer, debian linux, freedesktop gst-plugins-good +6 more +8 moreGstreamer: incomplete fix of cve-2026-1940CVE-2026-1940Fix available5.1 Medium
- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()CVE-2026-33412Fix available5.6 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd libraryCVE-2026-4647Fix available6.1 Medium
- Show moreLoading…