# Red Hat Enterprise Linux 9.4 Extended Update Support. Every CVE that names Red Hat Enterprise Linux 9.4 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui](https://agentprime.io/advisories/CVE-2026-4802.md) `CVE-2026-4802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection - [Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling](https://agentprime.io/advisories/CVE-2026-34002.md) `CVE-2026-34002` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.](https://agentprime.io/advisories/CVE-2026-34000.md) `CVE-2026-34000` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access](https://agentprime.io/advisories/CVE-2026-34003.md) `CVE-2026-34003` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption](https://agentprime.io/advisories/CVE-2026-34001.md) `CVE-2026-34001` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling](https://agentprime.io/advisories/CVE-2026-33999.md) `CVE-2026-33999` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Memory corruption - [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md) `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition - [Corosync: corosync: denial of service via integer overflow in join message validation](https://agentprime.io/advisories/CVE-2026-35092.md) `CVE-2026-35092` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Corosync: corosync: denial of service and information disclosure via crafted udp packet](https://agentprime.io/advisories/CVE-2026-35091.md) `CVE-2026-35091` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-253 - [Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image](https://agentprime.io/advisories/CVE-2026-5201.md) `CVE-2026-5201` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing](https://agentprime.io/advisories/CVE-2026-5121.md) `CVE-2026-5121` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing](https://agentprime.io/advisories/CVE-2026-4775.md) `CVE-2026-4775` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing](https://agentprime.io/advisories/CVE-2026-4424.md) `CVE-2026-4424` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption - [Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive](https://agentprime.io/advisories/CVE-2026-4111.md) `CVE-2026-4111` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service - [Nfs-utils: rpc.mountd in the nfs-utils privilege escalation](https://agentprime.io/advisories/CVE-2025-12801.md) `CVE-2025-12801` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-279 - [Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification](https://agentprime.io/advisories/CVE-2025-14831.md) `CVE-2025-14831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Denial of service - [Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response](https://agentprime.io/advisories/CVE-2026-1761.md) `CVE-2026-1761` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 2 Feb 2026 · Tags: Memory corruption - [Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing](https://agentprime.io/advisories/CVE-2025-14242.md) `CVE-2025-14242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication](https://agentprime.io/advisories/CVE-2026-0719.md) `CVE-2026-0719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jan 2026 · Tags: Memory corruption - [Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)](https://agentprime.io/advisories/CVE-2025-14523.md) `CVE-2025-14523` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Dec 2025 · Tags: HTTP request smuggling - [Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14512.md) `CVE-2025-14512` · CVE record: GNOME glib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption - [Glib: glib: buffer underflow in gvariant parser leads to heap corruption](https://agentprime.io/advisories/CVE-2025-14087.md) `CVE-2025-14087` · CVE record: GNOME glib and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: Memory corruption - [Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash](https://agentprime.io/advisories/CVE-2025-66287.md) `CVE-2025-66287` · CVE record: The WebKitGTK Team WebKitGTK and 4 more · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2025 · Tags: Memory corruption - [Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop](https://agentprime.io/advisories/CVE-2025-13947.md) `CVE-2025-13947` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-346 - [Glib: integer overflow in in g_escape_uri_string()](https://agentprime.io/advisories/CVE-2025-13601.md) `CVE-2025-13601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.7 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption - [Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos](https://agentprime.io/advisories/CVE-2025-13502.md) `CVE-2025-13502` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for gettext command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61662.md) `CVE-2025-61662` · CVE record: GNU grub2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Python-kdcproxy: remote dos via unbounded tcp upstream buffering](https://agentprime.io/advisories/CVE-2025-59089.md) `CVE-2025-59089` · CVE record: latchset kdcproxy and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Denial of service - [Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv](https://agentprime.io/advisories/CVE-2025-59088.md) `CVE-2025-59088` · CVE record: latchset kdcproxy and 4 more · CVSS 8.6 High · Not analysed yet · Published 12 Nov 2025 · Tags: Server-side request forgery (SSRF) - [Xorg: xmayland: use-after-free in xpresentnotify structure creation](https://agentprime.io/advisories/CVE-2025-62229.md) `CVE-2025-62229` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in xkb client resource removal](https://agentprime.io/advisories/CVE-2025-62230.md) `CVE-2025-62230` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: value overflow in xkbsetcompatmap()](https://agentprime.io/advisories/CVE-2025-62231.md) `CVE-2025-62231` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md) `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-7493.md) `CVE-2025-7493` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-1220 - [Libsoup: out-of-bounds read in cookie date handling of libsoup http library](https://agentprime.io/advisories/CVE-2025-11021.md) `CVE-2025-11021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: Memory corruption - [Libtiff: libtiff write-what-where](https://agentprime.io/advisories/CVE-2025-9900.md) `CVE-2025-9900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-123 - [Udisks: out-of-bounds read in udisks daemon](https://agentprime.io/advisories/CVE-2025-8067.md) `CVE-2025-8067` · CVE record: storaged-project udisks and 4 more · CVSS 8.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: Memory corruption - [Linux-pam: incomplete fix for cve-2025-6020](https://agentprime.io/advisories/CVE-2025-8941.md) `CVE-2025-8941` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Aug 2025 · Tags: Path traversal - [Gnutls: null pointer dereference in \_gnutls_figure_common_ciphersuite()](https://agentprime.io/advisories/CVE-2025-6395.md) `CVE-2025-6395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr](https://agentprime.io/advisories/CVE-2025-7425.md) `CVE-2025-7425` · CVE record: GNOME libxml2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls certtool template parsing](https://agentprime.io/advisories/CVE-2025-32990.md) `CVE-2025-32990` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gnutls: vulnerability in gnutls sct extension parsing](https://agentprime.io/advisories/CVE-2025-32989.md) `CVE-2025-32989` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Weak cryptography or TLS - [Gnutls: vulnerability in gnutls othername san export](https://agentprime.io/advisories/CVE-2025-32988.md) `CVE-2025-32988` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption - [Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf](https://agentprime.io/advisories/CVE-2025-7345.md) `CVE-2025-7345` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Libssh: invalid return code for chacha20 poly1305 with openssl backend](https://agentprime.io/advisories/CVE-2025-5987.md) `CVE-2025-5987` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-393 - [Libssh: out-of-bounds read in sftp_handle()](https://agentprime.io/advisories/CVE-2025-5318.md) `CVE-2025-5318` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption - [Libblockdev: lpe from allow_active to root in libblockdev via udisks](https://agentprime.io/advisories/CVE-2025-6019.md) `CVE-2025-6019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 19 Jun 2025 · Tags: Privilege escalation - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension](https://agentprime.io/advisories/CVE-2025-49180.md) `CVE-2025-49180` · CVE record: X.Org xwayland and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension](https://agentprime.io/advisories/CVE-2025-49179.md) `CVE-2025-49179` · CVE record: X.Org xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore](https://agentprime.io/advisories/CVE-2025-49178.md) `CVE-2025-49178` · CVE record: X.Org xwayland and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-667 - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode](https://agentprime.io/advisories/CVE-2025-49177.md) `CVE-2025-49177` · CVE record: X.Org xwayland and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Information disclosure - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension](https://agentprime.io/advisories/CVE-2025-49176.md) `CVE-2025-49176` · CVE record: X.Org xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors](https://agentprime.io/advisories/CVE-2025-49175.md) `CVE-2025-49175` · CVE record: X.Org xwayland and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-4404.md) `CVE-2025-4404` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-1220 - [Linux-pam: linux-pam directory traversal](https://agentprime.io/advisories/CVE-2025-6020.md) `CVE-2025-6020` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Path traversal - [Libxml: heap use after free (uaf) leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49794.md) `CVE-2025-49794` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml: type confusion leads to denial of service (dos)](https://agentprime.io/advisories/CVE-2025-49796.md) `CVE-2025-49796` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption - [Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2](https://agentprime.io/advisories/CVE-2025-6021.md) `CVE-2025-6021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2025 · Tags: Memory corruption - [Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c](https://agentprime.io/advisories/CVE-2025-5914.md) `CVE-2025-5914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .