Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-40918	Gimp: gimp: denial of service via crafted pvr image file	5.5 Medium	Apr 15, 2026
CVE-2026-40917	Gimp: gimp: application crashes or information disclosure via crafted icns image files	5.0 Medium	Apr 15, 2026
CVE-2026-40916	Gimp: gimp: denial of service due to stack buffer overflow in tim image loader	5.0 Medium	Apr 15, 2026
CVE-2026-40915	Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader	5.5 Medium	Apr 15, 2026
CVE-2026-6245	Sssd: out-of-bounds read in the sssd	5.5 Medium	Apr 15, 2026
CVE-2026-3505	Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the…	8.7 High	Apr 15, 2026
CVE-2026-5588	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	6.3 Medium	Apr 15, 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 High	Apr 15, 2026
CVE-2026-0636	Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the…	5.5 Medium	Apr 15, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-33414	Podman is a tool for managing OCI containers and pods	4.0 Medium	Apr 14, 2026
CVE-2026-32203	Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-26171	Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-23666	Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network	7.5 High	Apr 14, 2026
CVE-2026-33116	Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized…	7.5 High	Apr 14, 2026
CVE-2026-32178	Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network	7.5 High	Apr 14, 2026
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 High	Apr 14, 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 High	Apr 13, 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Medium	Apr 13, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-28291	simple-git enables running native Git commands from JavaScript	8.1 High	Apr 13, 2026
CVE-2026-31419	In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in…	7.8 High	Apr 13, 2026
CVE-2026-32146	Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system…	8.3 High	Apr 11, 2026
CVE-2026-4154	GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability	7.8 High	Apr 11, 2026

Other Red Hat products