RH
Product
Red Hat Enterprise Linux 9
by Red Hat · last CVE Oct 26, 2026
On CISA KEVExploited in the wild
1,239
CVEs
5
On KEV
10.0
Max CVSS
127
New 30D
Severity mix
Critical 127High 373Medium 0Low 0
Watch

Add Red Hat Enterprise Linux 9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50261
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
Affected: All versions, or not specified
CVE-2026-50260
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
Affected: All versions, or not specified
CVE-2026-50258
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
Affected: All versions, or not specified
CVE-2026-50259
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
Affected: All versions, or not specified
CVE-2026-50256
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
Affected: All versions, or not specified
CVE-2026-50257
7.8
0%
Jun 5
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
Affected: All versions, or not specified
CVE-2026-11332
7.8
0%
Jun 5
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Affected: All versions, or not specified
CVE-2026-43958
7.8
0%
Jun 1
Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
Affected: All versions, or not specified
CVE-2026-10118
7.8
0%
Jun 1
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
Affected: All versions, or not specified
CVE-2026-46227
7.8
0%
May 28
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Affected: All versions, or not specified
CVE-2026-46189
7.8
0%
May 28
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
Affected: All versions, or not specified
CVE-2026-46181
7.8
0%
May 28
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Affected: All versions, or not specified
CVE-2026-46176
7.8
0%
May 28
RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
Affected: All versions, or not specified
CVE-2026-46145
7.8
0%
May 28
RDMA/mana: Validate rx_hash_key_len
Affected: All versions, or not specified
CVE-2026-46117
7.8
0%
May 28
RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
Affected: All versions, or not specified
CVE-2026-46116
7.8
0%
May 28
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
Affected: All versions, or not specified
CVE-2026-46090
7.8
0%
May 27
ALSA: aloop: Fix peer runtime UAF during format-change stop
Affected: All versions, or not specified
CVE-2026-45998
7.8
0%
May 27
rxrpc: Fix potential UAF after skb_unshare() failure
Affected: All versions, or not specified
CVE-2026-45984
7.8
0%
May 27
gfs2: Fix use-after-free in iomap inline data write path
Affected: All versions, or not specified
CVE-2026-45852
7.8
0%
May 27
RDMA/rxe: Fix double free in rxe_srq_from_init
Affected: All versions, or not specified
CVE-2026-48864
7.8
0%
May 26
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Affected: All versions, or not specified
CVE-2026-8632
7.8
4%
May 20
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
Affected: All versions, or not specified
CVE-2026-43329
7.8
0%
May 8
netfilter: flowtable: strictly check for maximum number of actions
Affected: All versions, or not specified
CVE-2026-31663
7.8
0%
Apr 24
xfrm: hold dev ref until after transport_finish NF_HOOK
Affected: All versions, or not specified
CVE-2026-34003
7.8
0%
Apr 23
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
Affected: All versions, or not specified
CVE-2026-34001
7.8
0%
Apr 23
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
Affected: All versions, or not specified
CVE-2026-33999
7.8
0%
Apr 23
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
Affected: All versions, or not specified
CVE-2026-31488
7.8
0%
Apr 22
drm/amd/display: Do not skip unrelated mode changes in DSC validation
Affected: All versions, or not specified
CVE-2026-31474
7.8
0%
Apr 22
can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
Affected: All versions, or not specified
CVE-2026-6846
7.8
0%
Apr 22
Binutils: binutils: arbitrary code execution via malformed xcoff object file processing
Affected: All versions, or not specified
CVE-2026-41035
7.8
0%
Apr 16
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free
Affected: All versions, or not specified
CVE-2026-40915
7.8
0%
Apr 15
Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader
Affected: All versions, or not specified
CVE-2026-31419
7.8
0%
Apr 13
net: bonding: fix use-after-free in bond_xmit_broadcast()
Affected: All versions, or not specified
CVE-2026-4154
7.8
1%
Apr 11
GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-4153
7.8
1%
Apr 11
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-4152
7.8
1%
Apr 11
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-4151
7.8
1%
Apr 11
GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-4150
7.8
1%
Apr 11
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-34588
7.8
0%
Apr 6
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write
Affected: All versions, or not specified
CVE-2026-35535
7.8
0%
Apr 3
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…
Affected: All versions, or not specified
CVE-2026-5165
7.8
0%
Mar 30
Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset
Affected: All versions, or not specified
CVE-2026-4775
7.8
1%
Mar 24
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Affected: All versions, or not specified
CVE-2026-32647
7.8
1%
Mar 24
NGINX ngx_http_mp4_module vulnerability
Affected: All versions, or not specified
CVE-2026-27784
7.8
1%
Mar 24
NGINX ngx_http_mp4_module vulnerability
Affected: All versions, or not specified
CVE-2026-2921
7.8
1%
Mar 13
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-3082
7.8
1%
Mar 13
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-2923
7.8
1%
Mar 13
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-2922
7.8
0%
Mar 13
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-2920
7.8
1%
Mar 13
GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-27622
7.8
0%
Mar 3
OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write
Affected: All versions, or not specified
Page 8 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)