RH
Product
Red Hat Enterprise Linux 9.6 Extended Update Support
by Red Hat · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
481
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 91High 328Medium 59Low 3
Watch

Add Red Hat Enterprise Linux 9.6 Extended Update Support to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73434
6.1
0%
Aug 12
Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
Affected: All versions, or not specified
CVE-2026-55655
6.1
0%
Jun 23
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
Affected: All versions, or not specified
CVE-2026-42338
6.1
0%
May 12
ip-address: XSS in Address6 HTML-emitting methods
Affected: All versions, or not specified
CVE-2025-59089
5.9
1%
Nov 12
Python-kdcproxy: remote dos via unbounded tcp upstream buffering
Affected: All versions, or not specified
CVE-2026-50263
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
Affected: All versions, or not specified
CVE-2026-50262
5.5
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
Affected: All versions, or not specified
CVE-2026-23401
5.5
0%
Apr 1
KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
Affected: All versions, or not specified
CVE-2026-4948
5.5
0%
Mar 27
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
Affected: All versions, or not specified
CVE-2026-20608
5.5
0%
Feb 11
This issue was addressed through improved state management
Affected: All versions, or not specified
CVE-2026-24049
5.5
0%
Jan 22
wheel Allows Arbitrary File Permission Modification via Path Traversal
Affected: All versions, or not specified
CVE-2025-10911
5.5
0%
Sep 25
Libxslt: use-after-free with key data stored cross-rvt
Affected: All versions, or not specified
CVE-2026-12299
5.4
0%
Jun 16
JIT miscompilation in the DOM: Core & HTML component
Affected: All versions, or not specified
CVE-2026-12298
5.4
0%
Jun 16
Memory safety bug fixed in Thunderbird 152
Affected: All versions, or not specified
CVE-2026-15588
5.3
0%
Jul 20
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Affected: All versions, or not specified
CVE-2026-12329
5.3
0%
Jun 16
Memory safety bug fixed in Thunderbird ESR 140.12
Affected: All versions, or not specified
CVE-2026-42015
5.3
1%
May 26
Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Affected: All versions, or not specified
CVE-2026-8391
5.3
0%
May 12
Other issue in the JavaScript Engine component
Affected: All versions, or not specified
CVE-2026-4891
5.3
6%
May 11
No description published yet
Affected: All versions, or not specified
CVE-2026-42258
5.3
1%
May 9
net-imap: Command Injection via unvalidated Symbol inputs
Affected: All versions, or not specified
CVE-2025-14831
5.3
1%
Feb 9
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Affected: All versions, or not specified
CVE-2025-13465
5.3
2%
Jan 21
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Affected: All versions, or not specified
CVE-2026-71227
5.1
0%
Aug 5
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
Affected: All versions, or not specified
CVE-2026-23868
5.1
0%
Mar 10
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling
Affected: All versions, or not specified
CVE-2026-42006
4.3
1%
May 12
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP
Affected: All versions, or not specified
CVE-2026-28901
4.3
0%
May 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-20664
4.3
1%
Mar 25
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-28859
4.3
1%
Mar 25
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-20635
4.3
0%
Feb 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-5419
3.7
1%
Jun 1
Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Affected: All versions, or not specified
CVE-2026-4519
3.3
0%
Mar 20
webbrowser.open() allows leading dashes in URLs
Affected: All versions, or not specified
CVE-2025-6170
2.5
0%
Jun 16
Libxml2: stack buffer overflow in xmllint interactive shell command handling
Affected: All versions, or not specified
Page 10 of 10 · 481 total
1…910