Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18358	Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service	7.5 High	Jul 31, 2026
CVE-2026-11770	389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check	7.5 High	Jul 31, 2026
CVE-2026-15722	389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing	7.5 High	Jul 31, 2026
CVE-2026-68562	A flaw was found in ansible-collection-redhat-leapp	6.2 Medium	Jul 30, 2026
CVE-2026-68563	A flaw was found in ansible-collection-redhat-leapp	5.5 Medium	Jul 30, 2026
CVE-2026-58216	An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd)…	5.3 Medium	Jul 30, 2026
CVE-2026-58222	A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory…	8.8 High	Jul 30, 2026
CVE-2026-58218	A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the…	5.3 Medium	Jul 30, 2026
CVE-2026-18369	Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects	5.8 Medium	Jul 30, 2026
CVE-2026-16531	Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet	5.3 Medium	Jul 30, 2026
CVE-2026-16530	Pcp: pcp: remote denial of service and information leakage	6.5 Medium	Jul 30, 2026
CVE-2026-16529	Pcp: pcp: denial of service due to signed integer overflow	7.5 High	Jul 30, 2026
CVE-2026-16527	Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules	7.3 High	Jul 30, 2026
CVE-2026-16526	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability	8.8 High	Jul 30, 2026
CVE-2026-16524	Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection	7.8 High	Jul 30, 2026
CVE-2026-18220	An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils	7.8 High	Jul 29, 2026
CVE-2026-18107	Criu: criu: container escape via rseq critical section hijack during checkpoint/restore	7.8 High	Jul 28, 2026
CVE-2026-16313	Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export	7.6 High	Jul 28, 2026
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Medium	Jul 28, 2026
CVE-2026-17072	Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers	3.3 Low	Jul 28, 2026
CVE-2026-66759	Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images	7.1 High	Jul 27, 2026
CVE-2026-66757	Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images	5.5 Medium	Jul 27, 2026
CVE-2026-66758	Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images	7.8 High	Jul 27, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-17523	In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and…	7.8 High	Jul 27, 2026

Other Red Hat products