RH
Product
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
On CISA KEVExploited in the wild
258
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 59High 169Medium 28Low 2
Watch
Add Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6753 | 7.3 | Apr 21 | Incorrect boundary conditions in the WebRTC component Affected: All versions, or not specified |
| CVE-2026-6752 | 7.3 | Apr 21 | Incorrect boundary conditions in the WebRTC component Affected: All versions, or not specified |
| CVE-2026-6751 | 7.3 | Apr 21 | Uninitialized memory in the Audio/Video: Web Codecs component Affected: All versions, or not specified |
| CVE-2026-33412 | 7.3 | Mar 24 | Vim affected by Command injection via newline in glob() Affected: All versions, or not specified |
| CVE-2026-2045 | 7.3 | Feb 20 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-62229 | 7.3 | Oct 30 | Xorg: xmayland: use-after-free in xpresentnotify structure creation Affected: All versions, or not specified |
| CVE-2025-62230 | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal Affected: All versions, or not specified |
| CVE-2025-62231 | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() Affected: All versions, or not specified |
| CVE-2025-49179 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension Affected: All versions, or not specified |
| CVE-2025-49176 | 7.3 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension Affected: All versions, or not specified |
| CVE-2025-48798 | 7.3 | May 27 | Gimp: multiple use after free in xcf parser Affected: All versions, or not specified |
| CVE-2025-48797 | 7.3 | May 27 | Gimp: multiple heap buffer overflows in tga parser Affected: All versions, or not specified |
| CVE-2025-14905 | 7.2 | Feb 23 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow Affected: All versions, or not specified |
| CVE-2026-46333 | 7.1 | May 15 | ptrace: slightly saner 'get_dumpable()' logic Affected: All versions, or not specified |
| CVE-2026-4786 | 7.1 | Apr 13 | Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() Affected: All versions, or not specified |
| CVE-2026-4887 | 7.1 | Mar 26 | Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image Affected: All versions, or not specified |
| CVE-2025-6019 | 7.0 | Jun 19 | Libblockdev: lpe from allow_active to root in libblockdev via udisks Affected: All versions, or not specified |
| CVE-2025-5222 | 7.0 | May 27 | Icu: stack buffer overflow in the srbroot::addtag function Affected: All versions, or not specified |
| CVE-2024-6409 | 7.0 | Jul 8 | Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 Affected: All versions, or not specified |