# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader](https://agentprime.io/advisories/CVE-2026-40915.md) `CVE-2026-40915` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Sssd: out-of-bounds read in the sssd](https://agentprime.io/advisories/CVE-2026-6245.md) `CVE-2026-6245` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder](https://agentprime.io/advisories/CVE-2026-1584.md) `CVE-2026-1584` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption - [Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()](https://agentprime.io/advisories/CVE-2026-4878.md) `CVE-2026-4878` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Race condition - [Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows](https://agentprime.io/advisories/CVE-2025-14821.md) `CVE-2025-14821` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-427 - [Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection](https://agentprime.io/advisories/CVE-2026-4631.md) `CVE-2026-4631` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 7 Apr 2026 · Tags: Command injection - [Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive](https://agentprime.io/advisories/CVE-2026-5745.md) `CVE-2026-5745` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Memory corruption - [Tar: tar: hidden file injection via crafted archives](https://agentprime.io/advisories/CVE-2026-5704.md) `CVE-2026-5704` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Unrestricted file upload - [Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing](https://agentprime.io/advisories/CVE-2026-5673.md) `CVE-2026-5673` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Memory corruption - [Util-linux: util-linux: access control bypass due to improper hostname canonicalization](https://agentprime.io/advisories/CVE-2026-3184.md) `CVE-2026-3184` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-289 - [Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification](https://agentprime.io/advisories/CVE-2026-2625.md) `CVE-2026-2625` · CVE record: Red Hat Red Hat Hardened Images and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Weak cryptography or TLS - [Libinput: libinput: information disclosure via dangling pointer in lua plugin handling](https://agentprime.io/advisories/CVE-2026-35094.md) `CVE-2026-35094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins](https://agentprime.io/advisories/CVE-2026-35093.md) `CVE-2026-35093` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 8.8 High · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [Corosync: corosync: denial of service via integer overflow in join message validation](https://agentprime.io/advisories/CVE-2026-35092.md) `CVE-2026-35092` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption - [Corosync: corosync: denial of service and information disclosure via crafted udp packet](https://agentprime.io/advisories/CVE-2026-35091.md) `CVE-2026-35091` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-253 - [Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image](https://agentprime.io/advisories/CVE-2026-5201.md) `CVE-2026-5201` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption - [Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset](https://agentprime.io/advisories/CVE-2026-5165.md) `CVE-2026-5165` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request](https://agentprime.io/advisories/CVE-2026-5164.md) `CVE-2026-5164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing](https://agentprime.io/advisories/CVE-2026-5121.md) `CVE-2026-5121` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment](https://agentprime.io/advisories/CVE-2026-5119.md) `CVE-2026-5119` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS - [Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization](https://agentprime.io/advisories/CVE-2026-4948.md) `CVE-2026-4948` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-279 - [Libssh: libssh: denial of service via improper configuration file handling](https://agentprime.io/advisories/CVE-2026-0965.md) `CVE-2026-0965` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Path traversal - [Libssh: libssh: denial of service via inefficient regular expression processing](https://agentprime.io/advisories/CVE-2026-0967.md) `CVE-2026-0967` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Libssh: libssh: denial of service due to malformed sftp message](https://agentprime.io/advisories/CVE-2026-0968.md) `CVE-2026-0968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Libssh: improper sanitation of paths received from scp servers](https://agentprime.io/advisories/CVE-2026-0964.md) `CVE-2026-0964` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Path traversal - [Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()](https://agentprime.io/advisories/CVE-2026-0966.md) `CVE-2026-0966` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [P11-kit: null dereference via c_derivekey with specific null parameters](https://agentprime.io/advisories/CVE-2026-2100.md) `CVE-2026-2100` · CVE record: p11-glue p11-kit and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow](https://agentprime.io/advisories/CVE-2026-2239.md) `CVE-2026-2239` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 2.8 Low · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-170 - [Gimp: gimp: memory corruption due to integer overflow in ico file handling](https://agentprime.io/advisories/CVE-2026-2272.md) `CVE-2026-2272` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via crafted psp image file](https://agentprime.io/advisories/CVE-2026-2271.md) `CVE-2026-2271` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake](https://agentprime.io/advisories/CVE-2026-2436.md) `CVE-2026-2436` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [Polkit: polkit: denial of service via unbounded input processing through standard input](https://agentprime.io/advisories/CVE-2026-4897.md) `CVE-2026-4897` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Denial of service - [Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image](https://agentprime.io/advisories/CVE-2026-4887.md) `CVE-2026-4887` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-193 - [Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing](https://agentprime.io/advisories/CVE-2026-4775.md) `CVE-2026-4775` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption - [Gstreamer: incomplete fix of cve-2026-1940](https://agentprime.io/advisories/CVE-2026-1940.md) `CVE-2026-1940` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Memory corruption - [Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library](https://agentprime.io/advisories/CVE-2026-4647.md) `CVE-2026-4647` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources](https://agentprime.io/advisories/CVE-2026-2369.md) `CVE-2026-2369` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption - [Libarchive: libarchive: denial of service via malformed iso file processing](https://agentprime.io/advisories/CVE-2026-4426.md) `CVE-2026-4426` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-1335 - [Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing](https://agentprime.io/advisories/CVE-2026-4424.md) `CVE-2026-4424` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: denial of service via use-after-free in http/2 server](https://agentprime.io/advisories/CVE-2026-4271.md) `CVE-2026-4271` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Memory corruption - [Libsoup: libsoup: header and http request injection via crlf injection](https://agentprime.io/advisories/CVE-2026-3633.md) `CVE-2026-3633` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 17 Mar 2026 · Tags: Other injection - [Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames](https://agentprime.io/advisories/CVE-2026-3632.md) `CVE-2026-3632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-1286 - [Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header](https://agentprime.io/advisories/CVE-2026-3634.md) `CVE-2026-3634` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 17 Mar 2026 · Tags: Other injection - [Binutils: gnu binutils: information disclosure via specially crafted xcoff object file](https://agentprime.io/advisories/CVE-2026-3441.md) `CVE-2026-3441` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Memory corruption - [Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker](https://agentprime.io/advisories/CVE-2026-3442.md) `CVE-2026-3442` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Memory corruption - [Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive](https://agentprime.io/advisories/CVE-2026-4111.md) `CVE-2026-4111` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service - [Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method](https://agentprime.io/advisories/CVE-2026-4105.md) `CVE-2026-4105` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Broken access control - [Libsoup: libsoup: authentication bypass via digest authentication replay attack](https://agentprime.io/advisories/CVE-2026-3099.md) `CVE-2026-3099` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-323 - [Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection](https://agentprime.io/advisories/CVE-2026-3234.md) `CVE-2026-3234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Other injection - [Nfs-utils: rpc.mountd in the nfs-utils privilege escalation](https://agentprime.io/advisories/CVE-2025-12801.md) `CVE-2025-12801` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-279 - [Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses](https://agentprime.io/advisories/CVE-2026-28295.md) `CVE-2026-28295` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Server-side request forgery (SSRF) - [Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths](https://agentprime.io/advisories/CVE-2026-28296.md) `CVE-2026-28296` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Other injection - [Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api](https://agentprime.io/advisories/CVE-2026-26104.md) `CVE-2026-26104` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control - [Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api](https://agentprime.io/advisories/CVE-2026-26103.md) `CVE-2026-26103` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control - [389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14905.md) `CVE-2025-14905` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Feb 2026 · Tags: Memory corruption - [Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing](https://agentprime.io/advisories/CVE-2026-2243.md) `CVE-2026-2243` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Memory corruption - [Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq](https://agentprime.io/advisories/CVE-2026-0665.md) `CVE-2026-0665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Memory corruption - [Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback](https://agentprime.io/advisories/CVE-2025-8860.md) `CVE-2025-8860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-212 - [Qemu-kvm: unbounded allocation in virtio-crypto](https://agentprime.io/advisories/CVE-2025-14876.md) `CVE-2025-14876` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Denial of service - [Kernel: secure boot does not automatically enable kernel lockdown](https://agentprime.io/advisories/CVE-2025-1272.md) `CVE-2025-1272` · CVE record: Fedora Project Fedora Linux and 4 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2026 · Tags: Authentication bypass Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .