Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-5201 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 7.5 Élevée 31 mars 2026
CVE-2026-33986 FreeRDP is a free implementation of the Remote Desktop Protocol 7.5 Élevée 30 mars 2026
CVE-2026-33984 FreeRDP is a free implementation of the Remote Desktop Protocol 7.5 Élevée 30 mars 2026
CVE-2026-33983 FreeRDP is a free implementation of the Remote Desktop Protocol 6.5 Moyenne 30 mars 2026
CVE-2026-21710 A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named… 7.5 Élevée 30 mars 2026
CVE-2026-34714 Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default… 9.2 Critique 30 mars 2026
CVE-2026-5165 Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset 6.7 Moyenne 30 mars 2026
CVE-2026-5164 Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request 6.7 Moyenne 30 mars 2026
CVE-2026-5121 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 7.5 Élevée 30 mars 2026
CVE-2026-5119 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Moyenne 30 mars 2026
CVE-2026-33941 Handlebars provides the power necessary to let users build semantic templates 8.3 Élevée 27 mars 2026
CVE-2026-33940 Handlebars provides the power necessary to let users build semantic templates 8.1 Élevée 27 mars 2026
CVE-2026-33939 Handlebars provides the power necessary to let users build semantic templates 7.5 Élevée 27 mars 2026
CVE-2026-33938 Handlebars provides the power necessary to let users build semantic templates 8.1 Élevée 27 mars 2026
CVE-2026-33937 Handlebars provides the power necessary to let users build semantic templates 9.8 Critique 27 mars 2026
CVE-2026-33896 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.4 Élevée 27 mars 2026
CVE-2026-33895 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.5 Élevée 27 mars 2026
CVE-2026-33894 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.5 Élevée 27 mars 2026
CVE-2026-33891 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.5 Élevée 27 mars 2026
CVE-2026-28367 Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 8.7 Élevée 27 mars 2026
CVE-2026-28369 Undertow: undertow: request smuggling via malformed http request headers 8.7 Élevée 27 mars 2026
CVE-2026-28368 Undertow: undertow: request smuggling via inconsistent header parsing 8.7 Élevée 27 mars 2026
CVE-2026-27876 RCE on Grafana via sqlExpressions 9.1 Critique 27 mars 2026
CVE-2026-27880 The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory… 7.5 Élevée 27 mars 2026
CVE-2026-27877 When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being… 6.5 Moyenne 27 mars 2026

Autres produits Red Hat