RH
Product
Red Hat Enterprise Linux 9
On CISA KEVExploited in the wild
1,239
CVEs
5
On KEV
10.0
Max CVSS
127
New 30D
Severity mix
Critical 127High 373Medium 0Low 0
Watch
Add Red Hat Enterprise Linux 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50261 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() Affected: All versions, or not specified |
| CVE-2026-50260 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() Affected: All versions, or not specified |
| CVE-2026-50258 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels Affected: All versions, or not specified |
| CVE-2026-50259 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing Affected: All versions, or not specified |
| CVE-2026-50256 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch Affected: All versions, or not specified |
| CVE-2026-50257 | 7.8 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() Affected: All versions, or not specified |
| CVE-2026-11332 | 7.8 | Jun 5 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution Affected: All versions, or not specified |
| CVE-2026-43958 | 7.8 | Jun 1 | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service Affected: All versions, or not specified |
| CVE-2026-10118 | 7.8 | Jun 1 | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication Affected: All versions, or not specified |
| CVE-2026-46227 | 7.8 | May 28 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL Affected: All versions, or not specified |
| CVE-2026-46189 | 7.8 | May 28 | RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Affected: All versions, or not specified |
| CVE-2026-46181 | 7.8 | May 28 | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Affected: All versions, or not specified |
| CVE-2026-46176 | 7.8 | May 28 | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() Affected: All versions, or not specified |
| CVE-2026-46145 | 7.8 | May 28 | RDMA/mana: Validate rx_hash_key_len Affected: All versions, or not specified |
| CVE-2026-46117 | 7.8 | May 28 | RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Affected: All versions, or not specified |
| CVE-2026-46116 | 7.8 | May 28 | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete Affected: All versions, or not specified |
| CVE-2026-46090 | 7.8 | May 27 | ALSA: aloop: Fix peer runtime UAF during format-change stop Affected: All versions, or not specified |
| CVE-2026-45998 | 7.8 | May 27 | rxrpc: Fix potential UAF after skb_unshare() failure Affected: All versions, or not specified |
| CVE-2026-45984 | 7.8 | May 27 | gfs2: Fix use-after-free in iomap inline data write path Affected: All versions, or not specified |
| CVE-2026-45852 | 7.8 | May 27 | RDMA/rxe: Fix double free in rxe_srq_from_init Affected: All versions, or not specified |
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: All versions, or not specified |
| CVE-2026-8632 | 7.8 | May 20 | HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution Affected: All versions, or not specified |
| CVE-2026-43329 | 7.8 | May 8 | netfilter: flowtable: strictly check for maximum number of actions Affected: All versions, or not specified |
| CVE-2026-31663 | 7.8 | Apr 24 | xfrm: hold dev ref until after transport_finish NF_HOOK Affected: All versions, or not specified |
| CVE-2026-34003 | 7.8 | Apr 23 | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access Affected: All versions, or not specified |
| CVE-2026-34001 | 7.8 | Apr 23 | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption Affected: All versions, or not specified |
| CVE-2026-33999 | 7.8 | Apr 23 | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling Affected: All versions, or not specified |
| CVE-2026-31488 | 7.8 | Apr 22 | drm/amd/display: Do not skip unrelated mode changes in DSC validation Affected: All versions, or not specified |
| CVE-2026-31474 | 7.8 | Apr 22 | can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Affected: All versions, or not specified |
| CVE-2026-6846 | 7.8 | Apr 22 | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing Affected: All versions, or not specified |
| CVE-2026-41035 | 7.8 | Apr 16 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free Affected: All versions, or not specified |
| CVE-2026-40915 | 7.8 | Apr 15 | Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader Affected: All versions, or not specified |
| CVE-2026-31419 | 7.8 | Apr 13 | net: bonding: fix use-after-free in bond_xmit_broadcast() Affected: All versions, or not specified |
| CVE-2026-4154 | 7.8 | Apr 11 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-4153 | 7.8 | Apr 11 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-4152 | 7.8 | Apr 11 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-4151 | 7.8 | Apr 11 | GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-4150 | 7.8 | Apr 11 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-34588 | 7.8 | Apr 6 | OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write Affected: All versions, or not specified |
| CVE-2026-35535 | 7.8 | Apr 3 | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to… Affected: All versions, or not specified |
| CVE-2026-5165 | 7.8 | Mar 30 | Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset Affected: All versions, or not specified |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: All versions, or not specified |
| CVE-2026-32647 | 7.8 | Mar 24 | NGINX ngx_http_mp4_module vulnerability Affected: All versions, or not specified |
| CVE-2026-27784 | 7.8 | Mar 24 | NGINX ngx_http_mp4_module vulnerability Affected: All versions, or not specified |
| CVE-2026-2921 | 7.8 | Mar 13 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-3082 | 7.8 | Mar 13 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2923 | 7.8 | Mar 13 | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2922 | 7.8 | Mar 13 | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-2920 | 7.8 | Mar 13 | GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-27622 | 7.8 | Mar 3 | OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
