Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-6478 | Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover… | 6.5 Medium | May 14, 2026 |
| CVE-2026-6477 | Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… | 8.8 High | May 14, 2026 |
| CVE-2026-6473 | Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to… | 8.8 High | May 14, 2026 |
| CVE-2026-44432 | urllib3 is an HTTP client library for Python | 8.9 High | May 13, 2026 |
| CVE-2026-42945 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module | 8.1 High | May 13, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-42899 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service… | 7.5 High | May 12, 2026 |
| CVE-2026-8401 | Sandbox escape in the Profile Backup component | 9.8 Critical | May 12, 2026 |
| CVE-2026-42006 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP | 4.3 Medium | May 12, 2026 |
| CVE-2026-8391 | Other issue in the JavaScript Engine component | 5.3 Medium | May 12, 2026 |
| CVE-2026-8388 | Incorrect boundary conditions in the JavaScript Engine: JIT component | 6.5 Medium | May 12, 2026 |
| CVE-2026-28901 | The issue was addressed with improved memory handling | 4.3 Medium | May 11, 2026 |
| CVE-2026-28946 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | May 11, 2026 |
| CVE-2026-28947 | A use-after-free issue was addressed with improved memory management | 8.8 High | May 11, 2026 |
| CVE-2026-43658 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28905 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28883 | A use-after-free issue was addressed with improved memory management | 7.5 High | May 11, 2026 |
| CVE-2026-28904 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28953 | The issue was addressed with improved memory handling | 7.5 High | May 11, 2026 |
| CVE-2026-28903 | The issue was addressed with improved memory handling | 6.5 Medium | May 11, 2026 |
| CVE-2026-28942 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | May 11, 2026 |
| CVE-2026-28902 | The issue was addressed with improved memory handling | 6.5 Medium | May 11, 2026 |
| CVE-2026-28847 | The issue was addressed with improved memory handling | 8.8 High | May 11, 2026 |
| CVE-2026-28955 | The issue was addressed with improved memory handling | 8.8 High | May 11, 2026 |
| CVE-2026-4892 | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute… | 8.4 High | May 11, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430