Vulnérabilités de Red Hat Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-2760	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component	10.0 Critique	24 févr. 2026
CVE-2026-2759	Incorrect boundary conditions in the Graphics: ImageLib component	9.8 Critique	24 févr. 2026
CVE-2026-2758	Use-after-free in the JavaScript: GC component	9.8 Critique	24 févr. 2026
CVE-2026-2757	Incorrect boundary conditions in the WebRTC: Audio/Video component	9.8 Critique	24 févr. 2026
CVE-2026-1709	A flaw was found in Keylime	9.4 Critique	6 févr. 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critique	20 janv. 2026
CVE-2026-0881	Sandbox escape in the Messaging System component	10.0 Critique	13 janv. 2026
CVE-2026-0879	Sandbox escape due to incorrect boundary conditions in the Graphics component	9.8 Critique	13 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critique	7 janv. 2026
CVE-2025-67268	gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file	9.8 Critique	2 janv. 2026
CVE-2025-10230	Samba: command injection in wins server hook script	10.0 Critique	7 nov. 2025
CVE-2025-7493	A privilege escalation flaw from host to domain administrator was found in FreeIPA	9.1 Critique	30 sept. 2025
CVE-2025-4404	Freeipa: idm: privilege escalation from host to domain admin in freeipa	9.1 Critique	17 juin 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critique	16 juin 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critique	16 juin 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critique	15 avr. 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critique	15 janv. 2025
CVE-2024-3094	Xz: malicious code in distributed source	10.0 Critique	29 mars 2024
CVE-2023-6816	Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer	9.8 Critique	18 janv. 2024
CVE-2023-3961	A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain…	9.1 Critique	3 nov. 2023
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critique	3 nov. 2023
CVE-2023-32254	A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server	9.8 Critique	10 juil. 2023
CVE-2023-32250	A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server	9.0 Critique	10 juil. 2023
CVE-2006-4339	Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass	9.1 Critique	5 sept. 2006

Autres produits Red Hat