Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-0877	Mitigation bypass in the DOM: Security component	8.1 High	Jan 13, 2026
CVE-2026-0719	Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication	8.6 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-43511	A use-after-free issue was addressed with improved memory management	6.5 Medium	Dec 12, 2025
CVE-2025-14523	Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)	8.2 High	Dec 11, 2025
CVE-2025-14512	Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow	6.5 Medium	Dec 11, 2025
CVE-2025-14087	Glib: glib: buffer underflow in gvariant parser leads to heap corruption	5.6 Medium	Dec 10, 2025
CVE-2025-66287	Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash	8.8 High	Dec 4, 2025
CVE-2025-13947	Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop	7.4 High	Dec 3, 2025
CVE-2025-13601	Glib: integer overflow in in g_escape_uri_string()	7.7 High	Nov 26, 2025
CVE-2025-13502	Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos	7.5 High	Nov 25, 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 High	Nov 18, 2025
CVE-2025-59089	If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g	5.9 Medium	Nov 12, 2025
CVE-2025-59088	Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv	8.6 High	Nov 12, 2025
CVE-2025-43457	A use-after-free issue was addressed with improved memory management	6.5 Medium	Nov 4, 2025
CVE-2025-43441	The issue was addressed with improved memory handling	4.3 Medium	Nov 4, 2025
CVE-2025-43438	A use-after-free issue was addressed with improved memory management	4.3 Medium	Nov 4, 2025
CVE-2025-43433	The issue was addressed with improved memory handling	8.8 High	Nov 4, 2025
CVE-2025-62229	Xorg: xmayland: use-after-free in xpresentnotify structure creation	7.3 High	Oct 30, 2025
CVE-2025-62230	Xorg: xwayland: use-after-free in xkb client resource removal	7.3 High	Oct 30, 2025
CVE-2025-62231	Xorg: xmayland: value overflow in xkbsetcompatmap()	7.3 High	Oct 30, 2025
CVE-2025-11561	Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems	8.8 High	Oct 9, 2025
CVE-2025-11234	Qemu-kvm: vnc websocket handshake use-after-free	7.5 High	Oct 3, 2025
CVE-2025-7493	A privilege escalation flaw from host to domain administrator was found in FreeIPA	9.1 Critical	Sep 30, 2025
CVE-2025-11021	Libsoup: out-of-bounds read in cookie date handling of libsoup http library	7.5 High	Sep 26, 2025

Other Red Hat products