RH
Product
Red Hat Enterprise Linux 9
by Red Hat · last CVE Oct 26, 2026
On CISA KEVExploited in the wild
1,151
CVEs
4
On KEV
10.0
Max CVSS
132
New 30D
Severity mix
Critical 124High 376Medium 0Low 0
Watch

Add Red Hat Enterprise Linux 9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47162
8.8
0%
Jun 11
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
Affected: All versions, or not specified
CVE-2026-45447
8.8
4%
Jun 9
Heap Use-After-Free in the PKCS7_verify() Function
Affected: All versions, or not specified
CVE-2026-46166
8.8
0%
May 28
wifi: mac80211: use safe list iteration in radar detect work
Affected: All versions, or not specified
CVE-2026-46152
8.8
0%
May 28
wifi: mac80211: drop stray 'static' from fast-RX rx_result
Affected: All versions, or not specified
CVE-2026-46125
8.8
0%
May 28
wifi: mac80211: remove station if connection prep fails
Affected: All versions, or not specified
CVE-2026-40033
8.8
1%
May 26
FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass
Affected: All versions, or not specified
CVE-2026-43503
8.8
2%
May 23
net: skbuff: propagate shared-frag marker through frag-transfer helpers
Affected: All versions, or not specified
CVE-2026-8975
8.8
0%
May 19
Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
Affected: All versions, or not specified
CVE-2026-6477
8.8
0%
May 14
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Affected: All versions, or not specified
CVE-2026-6473
8.8
1%
May 14
PostgreSQL server undersizes allocations, via integer wraparound
Affected: All versions, or not specified
CVE-2026-44293
8.8
0%
May 13
protobufjs: Code injection through bytes field defaults in generated toObject code
Affected: All versions, or not specified
CVE-2026-28947
8.8
0%
May 11
A use-after-free issue was addressed with improved memory management
Affected: All versions, or not specified
CVE-2026-28847
8.8
1%
May 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-28955
8.8
1%
May 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-43284
8.8
94%
May 8
xfrm: esp: avoid in-place decrypt on shared skb frags
Affected: All versions, or not specified
CVE-2026-41142
8.8
0%
May 7
OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API
Affected: All versions, or not specified
CVE-2026-43112
8.8
0%
May 6
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
Affected: All versions, or not specified
CVE-2026-25243
8.8
4%
May 5
redis-server RESTORE invalid memory access may allow remote code execution
Affected: All versions, or not specified
CVE-2026-23479
8.8
2%
May 5
redis-server use-after-free in unblock client flow may allow remote code execution
Affected: All versions, or not specified
CVE-2026-31709
8.8
0%
May 1
smb: client: validate the whole DACL before rewriting it in cifsacl
Affected: All versions, or not specified
CVE-2026-41651
8.8
0%
Apr 22
PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root
Affected: All versions, or not specified
CVE-2026-6750
8.8
0%
Apr 21
Privilege escalation in the Graphics: WebRender component
Affected: All versions, or not specified
CVE-2026-27140
8.8
1%
Apr 8
Code execution vulnerability in SWIG code generation in cmd/go
Affected: All versions, or not specified
CVE-2025-67030
8.8
1%
Mar 25
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642
Affected: All versions, or not specified
CVE-2026-3083
8.8
1%
Mar 13
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-3085
8.8
1%
Mar 13
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2023-43010
8.8
1%
Mar 12
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-26965
8.8
1%
Feb 25
FreeRDP has Out-of-bounds Write
Affected: All versions, or not specified
CVE-2026-26955
8.8
1%
Feb 25
FreeRDP has Out-of-bounds Write
Affected: All versions, or not specified
CVE-2026-2769
8.8
1%
Feb 24
Use-after-free in the Storage: IndexedDB component
Affected: All versions, or not specified
CVE-2026-2044
8.8
1%
Feb 20
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-0797
8.8
1%
Feb 20
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-2447
8.8
1%
Feb 16
Heap buffer overflow in libvpx
Affected: All versions, or not specified
CVE-2026-2006
8.8
1%
Feb 12
PostgreSQL missing validation of multibyte character length executes arbitrary code
Affected: All versions, or not specified
CVE-2026-2005
8.8
1%
Feb 12
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
Affected: All versions, or not specified
CVE-2026-2004
8.8
1%
Feb 12
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
Affected: All versions, or not specified
CVE-2025-15467
8.8
75%
Jan 27
Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Affected: All versions, or not specified
CVE-2026-0882
8.8
0%
Jan 13
Use-after-free in the IPC component
Affected: All versions, or not specified
CVE-2026-0880
8.8
1%
Jan 13
Sandbox escape due to integer overflow in the Graphics component
Affected: All versions, or not specified
CVE-2025-66287
8.8
0%
Dec 4
Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash
Affected: All versions, or not specified
CVE-2023-5178
8.8
10%
Nov 1
Kernel: use after free in nvmet_tcp_free_crypto in nvme
Affected: All versions, or not specified
CVE-2023-39417
8.8
2%
Aug 11
Postgresql: extension script @substitutions@ within quoting allow sql injection
Affected: All versions, or not specified
CVE-2026-13097
8.7
1%
Aug 20
Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
Affected: All versions, or not specified
CVE-2026-100236
8.6
0%
Oct 14
Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
Affected: All versions, or not specified
CVE-2026-102559
8.6
0%
Sep 29
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
Affected: All versions, or not specified
CVE-2026-102558
8.6
0%
Sep 29
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
Affected: All versions, or not specified
CVE-2026-102557
8.6
0%
Sep 29
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Affected: All versions, or not specified
CVE-2026-102556
8.6
0%
Sep 29
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Affected: All versions, or not specified
CVE-2026-58014
8.6
1%
Jun 30
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Affected: All versions, or not specified
CVE-2026-10649
8.6
1%
Jun 16
Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression
Affected: All versions, or not specified
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)