# Red Hat Enterprise Linux 9.6 Extended Update Support. Every CVE that names Red Hat Enterprise Linux 9.6 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images](https://agentprime.io/advisories/CVE-2026-66758.md) `CVE-2026-66758` · CVE record: GNOME GIMP and 4 more · CVSS 7.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: Memory corruption - [Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering](https://agentprime.io/advisories/CVE-2026-15588.md) `CVE-2026-15588` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Denial of service - [Xdgmime: heap-based buffer overflow in \_xdg_mime_magic_parse_magic_line() in xdgmimemagic.c](https://agentprime.io/advisories/CVE-2026-16118.md) `CVE-2026-16118` · CVE record: xdg xdgmime and 4 more · CVSS 7.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: Memory corruption - [Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading](https://agentprime.io/advisories/CVE-2026-5674.md) `CVE-2026-5674` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-427 - [Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation](https://agentprime.io/advisories/CVE-2026-15711.md) `CVE-2026-15711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service - [Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service](https://agentprime.io/advisories/CVE-2026-15709.md) `CVE-2026-15709` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-409 - [Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback](https://agentprime.io/advisories/CVE-2026-59692.md) `CVE-2026-59692` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer](https://agentprime.io/advisories/CVE-2026-59691.md) `CVE-2026-59691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind](https://agentprime.io/advisories/CVE-2026-11610.md) `CVE-2026-11610` · CVE record: 389ds 389-ds-base and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md) `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal - [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md) `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188 - [Gimp: gimp: integer overflow in read_rle_channel()](https://agentprime.io/advisories/CVE-2026-58384.md) `CVE-2026-58384` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()](https://agentprime.io/advisories/CVE-2026-58380.md) `CVE-2026-58380` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-193 - [Gimp: gimp: heap buffer overflow in read_channel_data()](https://agentprime.io/advisories/CVE-2026-58379.md) `CVE-2026-58379` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Pipewire: pulse server alloca stack overflow](https://agentprime.io/advisories/CVE-2026-14330.md) `CVE-2026-14330` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Pipewire: raop rtsp null deref](https://agentprime.io/advisories/CVE-2026-14324.md) `CVE-2026-14324` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption - [Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"](https://agentprime.io/advisories/CVE-2026-58016.md) `CVE-2026-58016` · CVE record: GNOME GLib and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md) `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal - [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md) `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193 - [Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"](https://agentprime.io/advisories/CVE-2026-58013.md) `CVE-2026-58013` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()](https://agentprime.io/advisories/CVE-2026-58012.md) `CVE-2026-58012` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime](https://agentprime.io/advisories/CVE-2026-58011.md) `CVE-2026-58011` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()](https://agentprime.io/advisories/CVE-2026-58010.md) `CVE-2026-58010` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()](https://agentprime.io/advisories/CVE-2026-14164.md) `CVE-2026-14164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image](https://agentprime.io/advisories/CVE-2026-12912.md) `CVE-2026-12912` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications](https://agentprime.io/advisories/CVE-2026-13601.md) `CVE-2026-13601` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-693 - [Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions](https://agentprime.io/advisories/CVE-2026-55655.md) `CVE-2026-55655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-923 - [Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service](https://agentprime.io/advisories/CVE-2026-55653.md) `CVE-2026-55653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode](https://agentprime.io/advisories/CVE-2026-56208.md) `CVE-2026-56208` · CVE record: Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression](https://agentprime.io/advisories/CVE-2026-10649.md) `CVE-2026-10649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin](https://agentprime.io/advisories/CVE-2026-42014.md) `CVE-2026-42014` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion](https://agentprime.io/advisories/CVE-2026-52718.md) `CVE-2026-52718` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling](https://agentprime.io/advisories/CVE-2026-52722.md) `CVE-2026-52722` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb](https://agentprime.io/advisories/CVE-2026-52720.md) `CVE-2026-52720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser](https://agentprime.io/advisories/CVE-2026-53704.md) `CVE-2026-53704` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser](https://agentprime.io/advisories/CVE-2026-53703.md) `CVE-2026-53703` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow](https://agentprime.io/advisories/CVE-2026-53705.md) `CVE-2026-53705` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder](https://agentprime.io/advisories/CVE-2026-52719.md) `CVE-2026-52719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow](https://agentprime.io/advisories/CVE-2026-11774.md) `CVE-2026-11774` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.6 High · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption - [Dracut: dracut: root code execution via dhcp options command injection](https://agentprime.io/advisories/CVE-2026-6893.md) `CVE-2026-6893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection - [389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser](https://agentprime.io/advisories/CVE-2026-11788.md) `CVE-2026-11788` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()](https://agentprime.io/advisories/CVE-2026-50263.md) `CVE-2026-50263` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes](https://agentprime.io/advisories/CVE-2026-50262.md) `CVE-2026-50262` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat](https://agentprime.io/advisories/CVE-2026-50264.md) `CVE-2026-50264` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()](https://agentprime.io/advisories/CVE-2026-50261.md) `CVE-2026-50261` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()](https://agentprime.io/advisories/CVE-2026-50260.md) `CVE-2026-50260` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels](https://agentprime.io/advisories/CVE-2026-50258.md) `CVE-2026-50258` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing](https://agentprime.io/advisories/CVE-2026-50259.md) `CVE-2026-50259` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch](https://agentprime.io/advisories/CVE-2026-50256.md) `CVE-2026-50256` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()](https://agentprime.io/advisories/CVE-2026-50257.md) `CVE-2026-50257` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Memory corruption - [Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend](https://agentprime.io/advisories/CVE-2026-10805.md) `CVE-2026-10805` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection - [Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal](https://agentprime.io/advisories/CVE-2026-5419.md) `CVE-2026-5419` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-208 - [Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service](https://agentprime.io/advisories/CVE-2026-43958.md) `CVE-2026-43958` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption - [Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication](https://agentprime.io/advisories/CVE-2026-10118.md) `CVE-2026-10118` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption - [Samba: remote code execution in samr](https://agentprime.io/advisories/CVE-2026-4408.md) `CVE-2026-4408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2026 · Tags: Command injection - [Samba: missing access check on reparse point operations](https://agentprime.io/advisories/CVE-2026-1933.md) `CVE-2026-1933` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [Samba: vfs_worm does not block directory modification](https://agentprime.io/advisories/CVE-2026-2340.md) `CVE-2026-2340` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-280 - [Samba: group policy certificate enrollment uses http\:// without validation](https://agentprime.io/advisories/CVE-2026-3012.md) `CVE-2026-3012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-345 - [Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling](https://agentprime.io/advisories/CVE-2026-42015.md) `CVE-2026-42015` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-193 - [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md) `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .