Red Hat Red Hat Enterprise Linux 9

• CVE-2023-4911 High 7.8 Exploited Glibc: buffer overflow in ld.so leading to privilege escalation 63.8%
• CVE-2026-123151 High 7.5 Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail 0.5%
• CVE-2026-121997 High 8.1 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 0.7%
• CVE-2026-121996 High 8.2 Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 0.5%
• CVE-2026-121995 High 7.5 Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail 0.3%
• CVE-2026-121994 High 8.8 Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length 0.5%
• CVE-2026-121259 Medium 6.5 Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator 0.3%
• CVE-2026-119843 Medium 6.5 Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags 0.6%
• CVE-2026-120831 Medium 6.5 Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service 0.3%
• CVE-2026-120830 High 7.4 Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure 0.2%
• CVE-2026-120740 Low 2.0 Hivex: hivex: denial of service via out-of-bounds read in big-data block processing 0.2%
• CVE-2026-120194 High 7.5 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step 0.5%
• CVE-2026-119842 Medium 6.5 Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check 0.3%
• CVE-2026-119727 Medium 6.5 Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation 0.3%
• CVE-2026-119729 Medium 6.5 Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service 0.4%
• CVE-2026-119728 Medium 6.5 Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure 0.3%
• CVE-2026-119777 High 8.8 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser 0.5%
• CVE-2026-119528 High 7.8 Gimp: gimp: stack buffer overflow in psd image resource header loader 0.2%
• CVE-2026-115456 Low 3.7 Gcc: out-of-bounds read in std::from_chars 0.2%
• CVE-2026-115455 Medium 6.5 Gcc: stack overflow in std::bitset on libstdc++ 0.3%
• CVE-2026-114691 Medium 5.9 Gcc: integer wrap in `std 0.4%
• CVE-2026-114690 Medium 6.2 Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std 0.1%
• CVE-2026-118593 Medium 5.9 Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099) 0.2%
• CVE-2026-103963 High 7.5 Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service 0.3%
• CVE-2026-118475 Low 3.6 Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk 0.1%
• CVE-2026-112922 Low 3.3 Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading 0.1%
• CVE-2026-91920 Medium 6.5 Undertow: undertow: chunkreader message length permits chunk-size overflow 0.2%
• CVE-2026-110133 Medium 5.8 Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback 0.2%
• CVE-2026-93009 Medium 4.3 Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder 0.2%
• CVE-2026-93010 Medium 4.3 Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check 0.2%
• CVE-2026-93006 Medium 6.8 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content 0.3%
• CVE-2026-93007 Medium 5.3 Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation 0.4%
• CVE-2026-93011 Medium 5.3 Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms 0.6%
• CVE-2026-93008 Medium 6.8 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations 0.1%
• CVE-2026-85498 Low 3.5 Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow 0.3%
• CVE-2026-117548 Medium 6.5 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service 0.3%
• CVE-2026-109411 High 8.1 Samba: access control bypass via vfs_ceph_rgw case-insensitive open 0.6%
• CVE-2026-116497 Medium 5.5 Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon 0.1%
• CVE-2026-115486 High 7.1 Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning 0.2%
• CVE-2026-115485 Medium 6.3 Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio 0.2%
• CVE-2026-115484 High 7.6 Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg 0.2%
• CVE-2026-115449 Low 3.5 Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest 0.2%
• CVE-2026-115221 Medium 5.4 Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership 0.1%
• CVE-2026-111079 High 7.4 Goose: goose: shell history and environment leak via terminal integration 0.3%
• CVE-2026-115207 Medium 5.5 Patch: filename validation bypass in reversal fallback allows file creation outside the working directory 0.1%
• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-85518 Medium 6.1 Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition 0.4%
• CVE-2026-114370 Low 3.7 Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal 0.3%
• CVE-2026-114236 Low 3.3 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 0.1%
• CVE-2026-92824 Medium 6.2 Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts 0.1%