Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreHivex: hivex: denial of service via out-of-bounds read in big-data block processingCVE-2026-120740Fix available2.0 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreJson-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepCVE-2026-1201947.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace checkCVE-2026-119842Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computationCVE-2026-119727Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceCVE-2026-119729Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureCVE-2026-119728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parserCVE-2026-119777Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunkCVE-2026-118475Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shadingCVE-2026-112922Fix available3.3 Low
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: chunkreader message length permits chunk-size overflowCVE-2026-919206.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollbackCVE-2026-110133Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of serviceCVE-2026-103963Fix available7.5 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of serviceCVE-2026-1175486.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-1154867.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-1154856.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-1154847.6 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreLibslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115449Fix available3.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: freeipa uses subject cn as proof of certificate ownershipCVE-2026-1152215.4 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreGoose: goose: shell history and environment leak via terminal integrationCVE-2026-111079Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-85518Fix available6.1 Medium
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversalCVE-2026-1143703.7 Low
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-92824Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line argumentsCVE-2026-113496Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line argumentsCVE-2026-113495Fix available5.0 Medium
- red hat enterprise linux 8, enterprise linux 10, enterprise linux 6 +2 more +4 moreGhostscript: reintroduction of .charkeys -dsafer bypass in rhel 8CVE-2026-112177Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_selected_pathCVE-2026-112261Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channelsCVE-2026-112258Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)CVE-2026-112257Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsingCVE-2026-112260Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: null pointer dereference in swatchbooker (sbz) palette importCVE-2026-1122595.5 Medium
- Show moreLoading…