Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-41044 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ,… Non notée 24 avr. 2026
CVE-2026-40466 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ… Non notée 24 avr. 2026
CVE-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,… 7.5 Élevée 24 avr. 2026
CVE-2026-41316 ERB is a templating system for Ruby 8.1 Élevée 24 avr. 2026
CVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document 6.5 Moyenne 23 avr. 2026
CVE-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headers 3.7 Faible 23 avr. 2026
CVE-2026-34003 Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access 7.8 Élevée 23 avr. 2026
CVE-2026-34001 Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption 7.8 Élevée 23 avr. 2026
CVE-2026-33999 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 7.8 Élevée 23 avr. 2026
CVE-2025-66286 Webkitgtk: authorization bypass through webpage::send-request signal handler 4.7 Moyenne 23 avr. 2026
CVE-2025-13763 Libopensc: opensc: multiple uses of uninitialized variable 5.7 Moyenne 23 avr. 2026
CVE-2026-31488 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode… 7.8 Élevée 22 avr. 2026
CVE-2026-31474 In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in… 7.8 Élevée 22 avr. 2026
CVE-2026-6862 Efivar: efivar: denial of service due to stack overflow in device path node parsing 5.5 Moyenne 22 avr. 2026
CVE-2026-6861 Emacs: emacs: memory corruption vulnerability when processing svg css 6.1 Moyenne 22 avr. 2026
CVE-2026-41651 PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a… 8.8 Élevée 22 avr. 2026
CVE-2026-6846 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 7.8 Élevée 22 avr. 2026
CVE-2026-6844 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 5.5 Moyenne 22 avr. 2026
CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service 5.5 Moyenne 22 avr. 2026
CVE-2026-31431 Exploitée Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability 7.8 Élevée 22 avr. 2026
CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file 5.0 Moyenne 22 avr. 2026
CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions 2.5 Faible 22 avr. 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Non notée 22 avr. 2026
CVE-2026-34282 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 7.5 Élevée 21 avr. 2026
CVE-2026-22016 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 7.5 Élevée 21 avr. 2026

Autres produits Red Hat