Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpmbuild gettarspec() crafted tar member name → macro injectionCVE-2026-78367Fix available7.0 High
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: use-after-free of jscvalue function parametersCVE-2026-78376Fix available8.8 High
- red hat certificate system 10, certificate system 11, enterprise linux 10 +4 more +6 moreJss: jss: jsstrustmanager does not verify nss trust flags on ca certificatesCVE-2026-78323Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request valueCVE-2026-731996.5 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipsCVE-2026-118619.6 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body readCVE-2026-731987.5 High
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastoreCVE-2026-130978.7 High
- freeipa, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIpa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encodingCVE-2026-731964.3 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readCVE-2026-731977.5 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: short realloc in poptconfigfiletostringCVE-2026-18743Fix available2.5 Low
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowCVE-2026-18917Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responsesCVE-2026-77014Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreCockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_htmlCVE-2026-76235Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreSwtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatchCVE-2026-75900Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folderCVE-2026-75032Fix available6.3 Medium
- red hat build of apache camel for spring boot 4, enterprise linux 10, enterprise linux 8 +5 more +7 moreIo.undertow/undertow: undertow: http response header integrity issue due to character truncationCVE-2026-198795.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibdm: lvm2: libdm: denial of service via uncontrolled recursion in config parserCVE-2026-19617Fix available5.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 morePodman: podman: quadlet install --replace non-truncating write retains removed host-access directivesCVE-2026-19730Fix available4.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handlingCVE-2026-735846.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdrCVE-2026-735836.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attackCVE-2026-735856.3 Medium
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsingCVE-2026-18728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsingCVE-2026-18727Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsingCVE-2026-18726Fix available6.5 Medium
- rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreRsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdCVE-2026-19654Fix available7.5 High
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeCVE-2026-73433Fix available6.6 Medium
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingCVE-2026-73434Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreBinutils: binutils: multiple use-after-free in add_archive_element via lto plugin processingCVE-2026-19548Fix available5.5 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlCVE-2026-186635.9 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writesCVE-2026-195508.2 High
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +11 more +13 moreUndertow-core: undertow:http request smuggling via oversized chunk-size bit overlapCVE-2026-141805.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreDbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attributeCVE-2026-19546Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreIperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustionCVE-2026-71218Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreIperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustionCVE-2026-71217Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreKbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginCVE-2026-72693Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreMrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationCVE-2026-72694Fix available7.1 High
- red hat pen drive powered by red hat lightspeed, certification program for red hat enterprise linux 9, enterprise linux 10 +2 more +4 moreInsights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archivesCVE-2026-193916.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreQemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds accessCVE-2026-6426Fix available4.4 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreShim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns nullCVE-2026-194113.9 Low
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: swtpm privilege escalation via symlink followingCVE-2026-63622Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: multiple vulnerabilities in file format plugins via crafted image fileCVE-2026-59091Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: arbitrary code execution in psd plugin due to unsigned underflowCVE-2026-59090Fix available8.4 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenanceCVE-2026-194046.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 moreGstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds readCVE-2026-19389Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreGstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderCVE-2026-19387Fix available7.6 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)CVE-2026-42170Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injectionCVE-2026-61477Fix available2.3 Low
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 extended lifecycle support - extension +25 more +27 moreDracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()CVE-2026-15816Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreP11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systemsCVE-2026-18938Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolicycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulationCVE-2026-19079Fix available4.4 Medium
- Show moreLoading…