Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6734	Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying…	7.5 High	Jun 17, 2026
CVE-2026-12151	Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but…	7.5 High	Jun 17, 2026
CVE-2026-12528	389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()	5.4 Medium	Jun 17, 2026
CVE-2026-42055	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules	8.1 High	Jun 17, 2026
CVE-2026-42530	NGINX Open Source has a vulnerability in the ngx_http_v3_module module	8.1 High	Jun 17, 2026
CVE-2026-2604	Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling	5.6 Medium	Jun 16, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-4367	Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing	5.5 Medium	Jun 16, 2026
CVE-2026-10649	Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression	8.6 High	Jun 16, 2026
CVE-2026-12329	Memory safety bug fixed in Thunderbird ESR 140.12	5.3 Medium	Jun 16, 2026
CVE-2026-12328	Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…	8.1 High	Jun 16, 2026
CVE-2026-12326	Memory safety bugs present in Firefox 151 and Thunderbird 151	8.1 High	Jun 16, 2026
CVE-2026-12299	JIT miscompilation in the DOM: Core & HTML component	5.4 Medium	Jun 16, 2026
CVE-2026-12298	Memory safety bug fixed in Thunderbird 152	5.4 Medium	Jun 16, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12293	Use-after-free in the Graphics: WebGPU component	9.8 Critical	Jun 16, 2026
CVE-2026-12292	Incorrect boundary conditions in the Web Audio component	8.1 High	Jun 16, 2026
CVE-2026-12291	Use-after-free in the Networking: HTTP component	8.8 High	Jun 16, 2026
CVE-2026-12290	Memory safety bug fixed in Thunderbird 152	8.1 High	Jun 16, 2026
CVE-2026-12289	Privilege escalation in the Graphics: WebRender component	8.8 High	Jun 16, 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026

Other Red Hat products