Red Hat Red Hat Enterprise Linux 9

• CVE-2026-43958 High 7.8 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service 0.2%
• CVE-2026-10118 High 7.8 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication 0.3%
• CVE-2026-6324 Medium 4.8 Libsoup: libsoup: http request smuggling via unsigned to signed conversion error 0.9%
• CVE-2026-10028 Medium 4.3 Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain 0.2%
• CVE-2026-4408 Critical 9.0 Samba: remote code execution in samr 2.5%
• CVE-2026-44604 High 7.0 Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command 0.6%
• CVE-2026-1933 High 7.1 Samba: missing access check on reparse point operations 0.9%
• CVE-2026-2340 Medium 6.5 Samba: vfs_worm does not block directory modification 0.9%
• CVE-2026-3012 High 8.0 Samba: group policy certificate enrollment uses http:// without validation 0.3%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2026-4480 Critical 9.0 Samba: samba: remote code execution in printing subsystem via unescaped job description 13.9%
• CVE-2026-9149 Medium 6.5 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 0.3%
• CVE-2026-9150 Medium 6.5 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 0.4%
• CVE-2026-9064 High 7.5 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 0.8%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-4802 High 8.0 Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 1.0%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-6420 Medium 6.3 Keylime: keylime: security bypass due to hardcoded tpm quote nonce 0.1%
• CVE-2026-34002 Medium 6.1 Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling 0.5%
• CVE-2026-34000 Medium 6.1 Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. 0.5%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3832 Low 3.7 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 0.8%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%
• CVE-2026-6732 Medium 6.5 Libxml2: libxml2: denial of service via crafted xsd-validated document 0.6%
• CVE-2026-2708 Low 3.7 Libsoup: libsoup: http request smuggling via duplicate content-length headers 0.3%
• CVE-2026-34003 High 7.8 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 0.2%
• CVE-2026-34001 High 7.8 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 0.3%
• CVE-2026-33999 High 7.8 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 0.4%
• CVE-2025-66286 Medium 4.7 Webkitgtk: authorization bypass through webpage::send-request signal handler 0.2%
• CVE-2025-13763 Medium 5.7 Libopensc: opensc: multiple uses of uninitialized variable 0.3%
• CVE-2026-6862 Medium 5.5 Efivar: efivar: denial of service due to stack overflow in device path node parsing 0.1%
• CVE-2026-6861 Medium 6.1 Emacs: emacs: memory corruption vulnerability when processing svg css 0.1%
• CVE-2026-6846 High 7.8 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 0.2%
• CVE-2026-6844 Medium 5.5 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 0.1%
• CVE-2026-6843 Medium 5.5 Nano: nano: format string vulnerability leads to denial of service 0.1%
• CVE-2026-6845 Medium 5.0 Binutils: binutils: denial of service via crafted elf file 0.1%
• CVE-2026-6842 Low 2.5 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions <0.1%
• CVE-2026-6507 High 7.5 Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing 0.5%
• CVE-2026-6384 High 7.3 Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing 0.3%
• CVE-2026-40919 Medium 6.1 Gimp: gimp: denial of service via specially crafted seattle filmworks file 0.3%
• CVE-2026-40918 Medium 5.5 Gimp: gimp: denial of service via crafted pvr image file 0.2%
• CVE-2026-40917 Medium 5.0 Gimp: gimp: application crashes or information disclosure via crafted icns image files 0.2%
• CVE-2026-40916 Medium 5.0 Gimp: gimp: denial of service due to stack buffer overflow in tim image loader 0.2%
• CVE-2026-40915 Medium 5.5 Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader 0.4%