Red Hat Red Hat Enterprise Linux 9

• CVE-2025-26596 High 7.8 Xorg: xwayland: heap overflow in xkbwritekeysyms() 0.4%
• CVE-2025-26595 High 7.8 Xorg: xwayland: buffer overflow in xkbvmodmasktext() 0.4%
• CVE-2025-26594 High 7.8 X.org: xwayland: use-after-free of the root cursor 0.4%
• CVE-2025-0690 Medium 6.1 Grub2: read: integer overflow may lead to out-of-bounds write 0.8%
• CVE-2025-0677 Medium 6.4 Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 0.3%
• CVE-2025-0624 High 7.6 Grub2: net: out-of-bounds write in grub_net_search_config_file() 1.4%
• CVE-2025-1118 Medium 4.4 Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 0.3%
• CVE-2024-45777 Medium 6.7 Grub2: grub-core/gettext: integer overflow leads to heap oob write. 0.3%
• CVE-2025-0622 Medium 6.4 Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 0.3%
• CVE-2024-45783 Medium 4.4 Grub2: fs/hfs+: refcount can be decremented twice 0.3%
• CVE-2024-45781 Medium 6.7 Grub2: fs/ufs: oob write in the heap 0.3%
• CVE-2024-45776 Medium 6.7 Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 0.3%
• CVE-2024-45775 Medium 5.2 Grub2: commands/extcmd: missing check for failed allocation 0.3%
• CVE-2025-26465 Medium 6.8 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 7.7%
• CVE-2024-45774 Medium 6.7 Grub2: reader/jpeg: heap oob write during jpeg parsing 0.3%
• CVE-2025-1244 High 8.8 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2.6%
• CVE-2024-12243 Medium 5.3 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 1.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-11218 High 8.6 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 0.4%
• CVE-2024-12084 Critical 9.8 Rsync: heap buffer overflow in rsync due to improper checksum length handling 72.5%
• CVE-2024-11029 Medium 5.5 Freeipa: administrative user data leaked through systemd journal 0.2%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12747 Medium 5.6 Rsync: race condition in rsync handling symbolic links 0.4%
• CVE-2024-12088 Medium 6.5 Rsync: --safe-links option bypass leads to path traversal 4.6%
• CVE-2024-12086 Medium 6.1 Rsync: rsync server leaks arbitrary client files 1.8%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2025-0306 High 7.4 Ruby: openssl: ruby marvin attack 0.7%
• CVE-2024-56827 Medium 5.6 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c 0.3%
• CVE-2024-56826 Medium 5.6 Openjpeg: heap buffer overflow in bin/common/color.c 0.3%
• CVE-2024-11614 High 7.4 Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library 0.6%
• CVE-2024-8676 High 7.4 Cri-o: checkpoint restore can be triggered from different namespaces 0.8%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-52336 High 7.8 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 0.3%
• CVE-2024-52616 Medium 5.3 Avahi: avahi wide-area dns predictable transaction ids 0.7%
• CVE-2024-52615 Medium 5.3 Avahi: avahi wide-area dns uses constant source port 0.6%
• CVE-2023-39180 Medium 4.0 Kernel: ksmbd: read request memory leak denial-of-service vulnerability 1.4%
• CVE-2023-39179 High 7.5 Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability 1.1%
• CVE-2023-39176 Medium 5.8 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability 0.7%
• CVE-2020-25720 High 7.5 Samba: check attribute access rights for ldap adds of computers 0.5%
• CVE-2024-7730 High 7.4 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() 0.3%
• CVE-2024-3447 Medium 6.0 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() 0.6%
• CVE-2023-4458 Medium 4.0 Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability 0.8%
• CVE-2023-4134 Medium 5.5 Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() 0.2%
• CVE-2024-49395 Medium 5.3 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 0.3%
• CVE-2024-49394 Medium 5.3 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing 0.3%
• CVE-2024-49393 Medium 6.5 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 0.3%
• CVE-2024-10963 High 7.4 Pam: improper hostname interpretation in pam_access leads to access control bypass 0.8%
• CVE-2024-10573 Medium 6.7 Mpg123: buffer overflow when writing decoded pcm samples 0.3%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%