Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-26955 | FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 High | Feb 25, 2026 |
| CVE-2026-26104 | Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api | 5.5 Medium | Feb 25, 2026 |
| CVE-2026-26103 | Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api | 7.1 High | Feb 25, 2026 |
| CVE-2026-27606 | Rollup is a module bundler for JavaScript | 8.8 High | Feb 25, 2026 |
| CVE-2026-2807 | Memory safety bugs present in Firefox 147 and Thunderbird 147 | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2798 | Use-after-free in the DOM: Core & HTML component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2799 | Use-after-free in the DOM: Core & HTML component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2797 | Use-after-free in the JavaScript: GC component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2795 | Use-after-free in the JavaScript: GC component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2796 | JIT miscompilation in the JavaScript: WebAssembly component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2794 | Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android | 6.5 Medium | Feb 24, 2026 |
| CVE-2026-2793 | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and… | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2792 | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2778 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2776 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2777 | Privilege escalation in the Messaging System component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2775 | Mitigation bypass in the DOM: HTML Parser component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2773 | Incorrect boundary conditions in the Web Audio component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2774 | Integer overflow in the Audio/Video component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2772 | Use-after-free in the Audio/Video: Playback component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2771 | Undefined behavior in the DOM: Core & HTML component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2770 | Use-after-free in the DOM: Bindings (WebIDL) component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2768 | Sandbox escape in the Storage: IndexedDB component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2769 | Use-after-free in the Storage: IndexedDB component | 8.8 High | Feb 24, 2026 |
| CVE-2026-2767 | Use-after-free in the JavaScript: WebAssembly component | 8.8 High | Feb 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430