Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers componentCVE-2026-12294Fix available9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the Graphics: WebGPU componentCVE-2026-122939.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-12292Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the Networking: HTTP componentCVE-2026-12291Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 152CVE-2026-12290Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 morePrivilege escalation in the Graphics: WebRender componentCVE-2026-12289Fix available8.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreGstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusionCVE-2026-52718Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingCVE-2026-52722Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbCVE-2026-52720Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parserCVE-2026-53704Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +3 more +5 moreGstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parserCVE-2026-53703Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsingCVE-2026-52721Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +12 more +14 moreGstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflowCVE-2026-53705Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +5 more +7 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoderCVE-2026-52719Fix available7.1 High
- websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 morews: Memory exhaustion DoS from tiny fragments and data chunksCVE-2026-48779Fix available7.5 High
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilationCVE-2026-8357Fix available5.4 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreHeap use-after-free in ODF number-format blank-width parsingCVE-2026-6040Fix available5.4 Medium
- form-data, red hat cluster observability operator 1.5.0, cryostat 4 +77 more +79 moreform-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)CVE-2026-12143Fix available8.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreQemu-kvm: heap buffer overflow in virtio-blk scsi request handlingCVE-2026-48914Fix available6.7 Medium
- vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreVim: Arbitrary Code Execution via Python Omni-CompletionCVE-2026-52860Fix available7.5 High
- vim, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 moreVim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory nameCVE-2026-47162Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parserCVE-2026-53702Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parserCVE-2026-53701Fix available6.5 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowCVE-2026-11774Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreKrb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds readCVE-2026-11850Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +23 more +25 moreDracut: dracut: root code execution via dhcp options command injectionCVE-2026-6893Fix available7.5 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationCVE-2026-118846.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +7 more +9 moreAnsible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownCVE-2026-11837Public exploitFix available7.3 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +5 more +7 more.NET SDK Elevation of Privilege VulnerabilityCVE-2026-45490Fix available7.8 High
- redhat 389 directory server, red hat directory server 11, directory server 12 +6 more +8 more389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsingCVE-2026-117934.9 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)CVE-2026-117923.3 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of serviceCVE-2026-117904.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crashCVE-2026-117894.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11.5 e4s for rhel 8 +22 more +24 more389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parserCVE-2026-117885.9 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-117875.0 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()CVE-2026-117861.9 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handlerCVE-2026-117854.3 Medium
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morenet: gro: don't merge zcopy skbsCVE-2026-46323Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entryCVE-2026-46316Public exploitFix available9.3 Critical
- arm c1-premium, c1-ultra, cortex-a710 +45 more +47 moreArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...CVE-2025-10263Public exploitFix available9.1 Critical
- hmbrand dbi, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreDBI versions before 1.648 for Perl saved errors in a limited-sized bufferCVE-2026-9698Fix available9.8 Critical
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)CVE-2026-45696Fix available8.3 High
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditionsCVE-2026-116116.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madviseCVE-2026-46309Fix available7.0 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflowCVE-2026-42536Public exploitFix available7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`CVE-2026-44185Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflowCVE-2026-34355Fix available7.5 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()CVE-2026-50263Fix available5.5 Medium
- Show moreLoading…