Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-6473 | Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to… | 8.8 High | May 14, 2026 |
| CVE-2026-45109 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes | 7.5 High | May 13, 2026 |
| CVE-2026-44579 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44578 | Next.js is a React framework for building full-stack web applications | 8.6 High | May 13, 2026 |
| CVE-2026-44577 | Next.js is a React framework for building full-stack web applications | 5.9 Medium | May 13, 2026 |
| CVE-2026-44574 | Next.js is a React framework for building full-stack web applications | 8.1 High | May 13, 2026 |
| CVE-2026-44575 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44573 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44432 | urllib3 is an HTTP client library for Python | 8.9 High | May 13, 2026 |
| CVE-2026-44293 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.7 High | May 13, 2026 |
| CVE-2026-42945 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module | 8.1 High | May 13, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-42899 | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service… | 7.5 High | May 12, 2026 |
| CVE-2026-35433 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally | 7.3 High | May 12, 2026 |
| CVE-2026-32177 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally | 7.3 High | May 12, 2026 |
| CVE-2026-8401 | Sandbox escape in the Profile Backup component | 9.8 Critical | May 12, 2026 |
| CVE-2026-42006 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP | 4.3 Medium | May 12, 2026 |
| CVE-2026-27851 | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted… | 7.4 High | May 12, 2026 |
| CVE-2026-8391 | Other issue in the JavaScript Engine component | 5.3 Medium | May 12, 2026 |
| CVE-2026-8390 | Use-after-free in the JavaScript: WebAssembly component | 7.3 High | May 12, 2026 |
| CVE-2026-8389 | JIT miscompilation in the JavaScript Engine: JIT component | 8.8 High | May 12, 2026 |
| CVE-2026-8388 | Incorrect boundary conditions in the JavaScript Engine: JIT component | 6.5 Medium | May 12, 2026 |
| CVE-2026-28901 | The issue was addressed with improved memory handling | 4.3 Medium | May 11, 2026 |
| CVE-2026-28946 | A use-after-free issue was addressed with improved memory management | 6.5 Medium | May 11, 2026 |
| CVE-2026-28947 | A use-after-free issue was addressed with improved memory management | 8.8 High | May 11, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430