Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-2766 | Use-after-free in the JavaScript Engine: JIT component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2764 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2765 | Use-after-free in the JavaScript Engine component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2763 | Use-after-free in the JavaScript Engine component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2761 | Sandbox escape in the Graphics: WebRender component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2762 | Integer overflow in the JavaScript: Standard Library component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2760 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | 10.0 Critical | Feb 24, 2026 |
| CVE-2026-2759 | Incorrect boundary conditions in the Graphics: ImageLib component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2758 | Use-after-free in the JavaScript: GC component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-2757 | Incorrect boundary conditions in the WebRTC: Audio/Video component | 9.8 Critical | Feb 24, 2026 |
| CVE-2026-27623 | Valkey is a distributed key-value database | 7.5 High | Feb 23, 2026 |
| CVE-2026-21863 | Valkey is a distributed key-value database | 7.5 High | Feb 23, 2026 |
| CVE-2025-67733 | Valkey is a distributed key-value database | 8.5 High | Feb 23, 2026 |
| CVE-2025-14905 | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow | 7.2 High | Feb 23, 2026 |
| CVE-2026-2048 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2047 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2045 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2044 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-0797 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 High | Feb 20, 2026 |
| CVE-2026-2243 | Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing | 5.1 Medium | Feb 19, 2026 |
| CVE-2026-0665 | An off-by-one error was found in QEMU's KVM Xen guest support | 6.5 Medium | Feb 18, 2026 |
| CVE-2025-8860 | A flaw was found in QEMU in the uefi-vars virtual device | 3.3 Low | Feb 18, 2026 |
| CVE-2025-14876 | A flaw was found in the virtio-crypto device of QEMU | 5.5 Medium | Feb 18, 2026 |
| CVE-2025-1272 | The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode… | 7.7 High | Feb 18, 2026 |
| CVE-2025-0577 | An insufficient entropy vulnerability was found in glibc | 4.8 Medium | Feb 18, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430