Red Hat Red Hat Enterprise Linux 9

• CVE-2026-6245 Medium 5.5 Sssd: out-of-bounds read in the sssd 0.1%
• CVE-2026-1584 High 7.5 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 1.4%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2025-14821 High 7.8 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows 0.1%
• CVE-2026-4631 Critical 9.8 Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 15.5%
• CVE-2026-5745 Medium 5.5 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 0.2%
• CVE-2026-5704 Medium 5.0 Tar: tar: hidden file injection via crafted archives 0.4%
• CVE-2026-5673 Medium 5.6 Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing 0.2%
• CVE-2026-3184 Low 3.7 Util-linux: util-linux: access control bypass due to improper hostname canonicalization 0.4%
• CVE-2026-2625 Medium 4.0 Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification <0.1%
• CVE-2026-35094 Low 3.3 Libinput: libinput: information disclosure via dangling pointer in lua plugin handling 0.1%
• CVE-2026-35093 High 8.8 Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins 0.2%
• CVE-2026-35092 High 7.5 Corosync: corosync: denial of service via integer overflow in join message validation 1.0%
• CVE-2026-35091 High 8.2 Corosync: corosync: denial of service and information disclosure via crafted udp packet 0.9%
• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5165 Medium 6.7 Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset 0.1%
• CVE-2026-5164 Medium 6.7 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request 0.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-5119 Medium 5.9 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 0.3%
• CVE-2026-28369 High 8.7 Undertow: undertow: request smuggling via malformed http request headers 0.7%
• CVE-2026-28367 High 8.7 Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 0.7%
• CVE-2026-28368 High 8.7 Undertow: undertow: request smuggling via inconsistent header parsing 0.7%
• CVE-2026-4948 Medium 5.5 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 0.1%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-2239 Low 2.8 Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow 0.5%
• CVE-2026-2272 Medium 4.3 Gimp: gimp: memory corruption due to integer overflow in ico file handling 0.9%
• CVE-2026-2271 Low 3.3 Gimp: gimp: denial of service via crafted psp image file 0.5%
• CVE-2026-2436 Medium 6.5 Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 0.5%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-4887 Medium 6.1 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image 0.6%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-1940 Medium 5.1 Gstreamer: incomplete fix of cve-2026-1940 0.2%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-2369 Medium 6.5 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 0.4%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4271 Medium 5.3 Libsoup: libsoup: denial of service via use-after-free in http/2 server 0.9%
• CVE-2026-3633 Low 3.9 Libsoup: libsoup: header and http request injection via crlf injection 0.2%
• CVE-2026-3632 Low 3.9 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames 0.2%
• CVE-2026-3634 Low 3.9 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header 0.2%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-4105 Medium 6.7 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method 0.1%
• CVE-2026-3099 Medium 5.8 Libsoup: libsoup: authentication bypass via digest authentication replay attack 0.4%