Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
CVE-2026-50258High 7.8Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels0.2%
CVE-2026-50259High 7.8Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing0.2%
CVE-2026-50256High 7.8Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch0.2%
CVE-2026-50257High 7.8Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()0.1%
CVE-2026-11332High 7.8Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution0.2%
CVE-2026-10805Medium 6.7Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend0.2%
CVE-2026-5419Low 3.7Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal0.5%
CVE-2026-43958High 7.8Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service0.2%
CVE-2026-10118High 7.8Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication0.3%
CVE-2026-4408Critical 9.0Samba: remote code execution in samr2.5%
CVE-2026-1933High 7.1Samba: missing access check on reparse point operations0.9%
CVE-2026-2340Medium 6.5Samba: vfs_worm does not block directory modification0.9%
CVE-2026-3012High 8.0Samba: group policy certificate enrollment uses http:// without validation0.3%
CVE-2026-42015Medium 5.3Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling0.7%
CVE-2026-42013High 8.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name0.4%
CVE-2026-42012High 7.1Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans0.4%
CVE-2026-5260High 8.2Gnutls: gnutls: information disclosure via heap overread in rsa key exchange0.8%
CVE-2026-48864High 7.8Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data0.2%
CVE-2026-4480Critical 9.0Samba: samba: remote code execution in printing subsystem via unescaped job description13.9%
CVE-2026-9064High 7.5389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)0.8%
CVE-2026-42009High 7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerability1.3%
CVE-2026-42011High 7.4Gnutls: gnutls: security bypass due to incorrect name constraint handling0.5%
CVE-2026-42010High 7.1Gnutls: gnutls: authentication bypass via nul character in username1.1%
CVE-2026-33846High 7.5Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly1.3%
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment2.1%
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison0.6%
CVE-2026-5119Medium 5.9Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment0.3%
CVE-2026-4887Medium 6.1Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image0.6%
CVE-2025-10911Medium 5.5Libxslt: use-after-free with key data stored cross-rvt0.2%