Vulnerabilities of Red Hat Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-31607	In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in…	9.8 Critical	Apr 24, 2026
CVE-2026-40372	Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges…	9.1 Critical	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2025-41118	Pyroscope is an open-source continuous profiling database	9.1 Critical	Apr 15, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-34078	Flatpak is a Linux application sandboxing and distribution framework	9.3 Critical	Apr 7, 2026
CVE-2026-4631	Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection	9.8 Critical	Apr 7, 2026
CVE-2026-20911	A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and…	9.8 Critical	Apr 7, 2026
CVE-2026-21413	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545…	9.8 Critical	Apr 7, 2026
CVE-2026-20889	A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b	9.8 Critical	Apr 7, 2026
CVE-2026-5731	Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and…	9.8 Critical	Apr 7, 2026
CVE-2026-31402	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache…	9.8 Critical	Apr 3, 2026
CVE-2026-34714	Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default…	9.2 Critical	Mar 30, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-27876	RCE on Grafana via sqlExpressions	9.1 Critical	Mar 27, 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-4721	Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…	9.8 Critical	Mar 24, 2026
CVE-2026-4720	Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026
CVE-2026-4729	Memory safety bugs present in Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026
CVE-2026-4700	Mitigation bypass in the Networking: HTTP component	9.8 Critical	Mar 24, 2026
CVE-2026-4696	Use-after-free in the Layout: Text and Fonts component	9.8 Critical	Mar 24, 2026
CVE-2026-4691	Use-after-free in the CSS Parsing and Computation component	9.8 Critical	Mar 24, 2026
CVE-2026-4692	Sandbox escape in the Responsive Design Mode component	9.6 Critical	Mar 24, 2026

Other Red Hat products