Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-4689	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component	10.0 Critical	Mar 24, 2026
CVE-2026-4690	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component	9.6 Critical	Mar 24, 2026
CVE-2026-4687	Sandbox escape due to incorrect boundary conditions in the Telemetry component	9.6 Critical	Mar 24, 2026
CVE-2026-4688	Sandbox escape due to use-after-free in the Disability Access APIs component	9.6 Critical	Mar 24, 2026
CVE-2026-4685	Incorrect boundary conditions in the Graphics: Canvas2D component	7.5 High	Mar 24, 2026
CVE-2026-4686	Incorrect boundary conditions in the Graphics: Canvas2D component	7.5 High	Mar 24, 2026
CVE-2026-4684	Race condition, use-after-free in the Graphics: WebRender component	7.5 High	Mar 24, 2026
CVE-2026-3260	A flaw was found in Undertow	5.9 Medium	Mar 24, 2026
CVE-2026-1940	Gstreamer: incomplete fix of cve-2026-1940	5.1 Medium	Mar 23, 2026
CVE-2026-4647	Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library	6.1 Medium	Mar 23, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-33210	Ruby JSON is a JSON implementation for Ruby	8.3 High	Mar 20, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 High	Mar 20, 2026
CVE-2026-32829	lz4_flex is a pure Rust implementation of LZ4 compression/decompression	8.2 High	Mar 20, 2026
CVE-2026-2369	Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources	6.5 Medium	Mar 19, 2026
CVE-2026-4426	Libarchive: libarchive: denial of service via malformed iso file processing	6.5 Medium	Mar 19, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2006-10003	XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack	9.8 Critical	Mar 19, 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 High	Mar 18, 2026
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 High	Mar 18, 2026
CVE-2026-26740	Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the…	8.2 High	Mar 18, 2026
CVE-2026-4271	Libsoup: libsoup: denial of service via use-after-free in http/2 server	5.3 Medium	Mar 17, 2026
CVE-2026-3634	Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header	3.9 Low	Mar 17, 2026
CVE-2026-3633	Libsoup: libsoup: header and http request injection via crlf injection	3.9 Low	Mar 17, 2026

Other Red Hat products