Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-53701	Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser	6.5 Medium	Jun 11, 2026
CVE-2026-11774	389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow	7.6 High	Jun 11, 2026
CVE-2026-49261	MariaDB server is a community developed fork of MySQL server	10.0 Critical	Jun 11, 2026
CVE-2026-44486	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44487	Axios is a promise based HTTP client for the browser and Node.js	8.2 High	Jun 11, 2026
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2026-11850	Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read	5.0 Medium	Jun 11, 2026
CVE-2026-2049	GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Jun 10, 2026
CVE-2026-46625	JavaScript Cookie is a JavaScript API for handling cookies, client-side	7.5 High	Jun 10, 2026
CVE-2026-6893	A flaw was found in dracut	7.5 High	Jun 10, 2026
CVE-2026-46529	Atril Document Viewer is the default document reader of the MATE desktop environment for Linux	8.4 High	Jun 10, 2026
CVE-2026-11884	389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation	6.5 Medium	Jun 10, 2026
CVE-2026-11837	Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown	7.3 High	Jun 10, 2026
CVE-2026-45591	Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network	7.5 High	Jun 9, 2026
CVE-2026-45490	Improper authorization in .NET allows an authorized attacker to elevate privileges locally	7.8 High	Jun 9, 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-11793	389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing	4.9 Medium	Jun 9, 2026
CVE-2026-11792	389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)	3.3 Low	Jun 9, 2026
CVE-2026-11790	389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service	4.9 Medium	Jun 9, 2026
CVE-2026-11789	389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash	4.9 Medium	Jun 9, 2026
CVE-2026-11787	389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing	5.0 Medium	Jun 9, 2026

Other Red Hat products