RH
Product
Red Hat Enterprise Linux 9
On CISA KEVExploited in the wild
1,151
CVEs
4
On KEV
10.0
Max CVSS
132
New 30D
Severity mix
Critical 124High 376Medium 0Low 0
Watch
Add Red Hat Enterprise Linux 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47162 | 8.8 | Jun 11 | Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name Affected: All versions, or not specified |
| CVE-2026-45447 | 8.8 | Jun 9 | Heap Use-After-Free in the PKCS7_verify() Function Affected: All versions, or not specified |
| CVE-2026-46166 | 8.8 | May 28 | wifi: mac80211: use safe list iteration in radar detect work Affected: All versions, or not specified |
| CVE-2026-46152 | 8.8 | May 28 | wifi: mac80211: drop stray 'static' from fast-RX rx_result Affected: All versions, or not specified |
| CVE-2026-46125 | 8.8 | May 28 | wifi: mac80211: remove station if connection prep fails Affected: All versions, or not specified |
| CVE-2026-40033 | 8.8 | May 26 | FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass Affected: All versions, or not specified |
| CVE-2026-43503 | 8.8 | May 23 | net: skbuff: propagate shared-frag marker through frag-transfer helpers Affected: All versions, or not specified |
| CVE-2026-8975 | 8.8 | May 19 | Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151 Affected: All versions, or not specified |
| CVE-2026-6477 | 8.8 | May 14 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory Affected: All versions, or not specified |
| CVE-2026-6473 | 8.8 | May 14 | PostgreSQL server undersizes allocations, via integer wraparound Affected: All versions, or not specified |
| CVE-2026-44293 | 8.8 | May 13 | protobufjs: Code injection through bytes field defaults in generated toObject code Affected: All versions, or not specified |
| CVE-2026-28947 | 8.8 | May 11 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2026-28847 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28955 | 8.8 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-43284 | 8.8 | May 8 | xfrm: esp: avoid in-place decrypt on shared skb frags Affected: All versions, or not specified |
| CVE-2026-41142 | 8.8 | May 7 | OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API Affected: All versions, or not specified |
| CVE-2026-43112 | 8.8 | May 6 | fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Affected: All versions, or not specified |
| CVE-2026-25243 | 8.8 | May 5 | redis-server RESTORE invalid memory access may allow remote code execution Affected: All versions, or not specified |
| CVE-2026-23479 | 8.8 | May 5 | redis-server use-after-free in unblock client flow may allow remote code execution Affected: All versions, or not specified |
| CVE-2026-31709 | 8.8 | May 1 | smb: client: validate the whole DACL before rewriting it in cifsacl Affected: All versions, or not specified |
| CVE-2026-41651 | 8.8 | Apr 22 | PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root Affected: All versions, or not specified |
| CVE-2026-6750 | 8.8 | Apr 21 | Privilege escalation in the Graphics: WebRender component Affected: All versions, or not specified |
| CVE-2026-27140 | 8.8 | Apr 8 | Code execution vulnerability in SWIG code generation in cmd/go Affected: All versions, or not specified |
| CVE-2025-67030 | 8.8 | Mar 25 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642 Affected: All versions, or not specified |
| CVE-2026-3083 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-3085 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-43010 | 8.8 | Mar 12 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-26965 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-26955 | 8.8 | Feb 25 | FreeRDP has Out-of-bounds Write Affected: All versions, or not specified |
| CVE-2026-2769 | 8.8 | Feb 24 | Use-after-free in the Storage: IndexedDB component Affected: All versions, or not specified |
| CVE-2026-2044 | 8.8 | Feb 20 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-0797 | 8.8 | Feb 20 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2447 | 8.8 | Feb 16 | Heap buffer overflow in libvpx Affected: All versions, or not specified |
| CVE-2026-2006 | 8.8 | Feb 12 | PostgreSQL missing validation of multibyte character length executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2005 | 8.8 | Feb 12 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code Affected: All versions, or not specified |
| CVE-2026-2004 | 8.8 | Feb 12 | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code Affected: All versions, or not specified |
| CVE-2025-15467 | 8.8 | Jan 27 | Stack buffer overflow in CMS (Auth)EnvelopedData parsing Affected: All versions, or not specified |
| CVE-2026-0882 | 8.8 | Jan 13 | Use-after-free in the IPC component Affected: All versions, or not specified |
| CVE-2026-0880 | 8.8 | Jan 13 | Sandbox escape due to integer overflow in the Graphics component Affected: All versions, or not specified |
| CVE-2025-66287 | 8.8 | Dec 4 | Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash Affected: All versions, or not specified |
| CVE-2023-5178 | 8.8 | Nov 1 | Kernel: use after free in nvmet_tcp_free_crypto in nvme Affected: All versions, or not specified |
| CVE-2023-39417 | 8.8 | Aug 11 | Postgresql: extension script @substitutions@ within quoting allow sql injection Affected: All versions, or not specified |
| CVE-2026-13097 | 8.7 | Aug 20 | Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore Affected: All versions, or not specified |
| CVE-2026-100236 | 8.6 | Oct 14 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy Affected: All versions, or not specified |
| CVE-2026-102559 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking Affected: All versions, or not specified |
| CVE-2026-102558 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth Affected: All versions, or not specified |
| CVE-2026-102557 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly Affected: All versions, or not specified |
| CVE-2026-102556 | 8.6 | Sep 29 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion Affected: All versions, or not specified |
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: All versions, or not specified |
| CVE-2026-10649 | 8.6 | Jun 16 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
