# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn](https://agentprime.io/advisories/CVE-2026-16560.md) `CVE-2026-16560` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-1220 - [Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame](https://agentprime.io/advisories/CVE-2026-16473.md) `CVE-2026-16473` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Memory corruption - [Libarchive: libarchive: signed integer overflow in archive_write_zip_header](https://agentprime.io/advisories/CVE-2026-16517.md) `CVE-2026-16517` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.9 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)](https://agentprime.io/advisories/CVE-2026-16493.md) `CVE-2026-16493` · CVE record: Red Hat Red Hat Satellite 6.17 for RHEL 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Libssh: libssh: authentication bypass via missing gssapi principal check](https://agentprime.io/advisories/CVE-2026-59851.md) `CVE-2026-59851` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control - [Libssh: libssh: use-after-free via data callbacks on closed channels](https://agentprime.io/advisories/CVE-2026-59850.md) `CVE-2026-59850` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Libssh: libssh: denial of service via automatic certificate authentication loop](https://agentprime.io/advisories/CVE-2026-59849.md) `CVE-2026-59849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Libssh: libssh: denial of service via sftp responses with unknown request ids](https://agentprime.io/advisories/CVE-2026-59848.md) `CVE-2026-59848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification](https://agentprime.io/advisories/CVE-2026-59847.md) `CVE-2026-59847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-253, CWE-1310 - [Libssh: libssh: information disclosure via proxycommand %r username expansion](https://agentprime.io/advisories/CVE-2026-59846.md) `CVE-2026-59846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module](https://agentprime.io/advisories/CVE-2026-16445.md) `CVE-2026-16445` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting](https://agentprime.io/advisories/CVE-2026-16461.md) `CVE-2026-16461` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Libssh: libssh: denial of service via oversized sftp read length](https://agentprime.io/advisories/CVE-2026-59844.md) `CVE-2026-59844` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Libssh: libssh: denial of service via unchecked proxycommand fork() failure](https://agentprime.io/advisories/CVE-2026-59845.md) `CVE-2026-59845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-390 - [Libssh: libssh: denial of service via zero advertised channel packet size](https://agentprime.io/advisories/CVE-2026-59843.md) `CVE-2026-59843` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Libssh: libssh: information disclosure via short gssapi curve25519 public key](https://agentprime.io/advisories/CVE-2026-59842.md) `CVE-2026-59842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.7 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Libssh: libssh: stack buffer overflow in sftp server longname construction](https://agentprime.io/advisories/CVE-2026-15370.md) `CVE-2026-15370` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.7 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes](https://agentprime.io/advisories/CVE-2026-15811.md) `CVE-2026-15811` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-212 - [Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links](https://agentprime.io/advisories/CVE-2026-15812.md) `CVE-2026-15812` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Authentication bypass - [Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png](https://agentprime.io/advisories/CVE-2026-64612.md) `CVE-2026-64612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-248 - [Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()](https://agentprime.io/advisories/CVE-2026-16277.md) `CVE-2026-16277` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption - [Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys](https://agentprime.io/advisories/CVE-2026-12080.md) `CVE-2026-12080` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-61 - [Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering](https://agentprime.io/advisories/CVE-2026-15588.md) `CVE-2026-15588` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Denial of service - [Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation](https://agentprime.io/advisories/CVE-2026-15813.md) `CVE-2026-15813` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption - [Xdgmime: heap-based buffer overflow in \_xdg_mime_magic_parse_magic_line() in xdgmimemagic.c](https://agentprime.io/advisories/CVE-2026-16118.md) `CVE-2026-16118` · CVE record: xdg xdgmime and 4 more · CVSS 7.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: Memory corruption - [Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading](https://agentprime.io/advisories/CVE-2026-5674.md) `CVE-2026-5674` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-427 - [Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service](https://agentprime.io/advisories/CVE-2026-48863.md) `CVE-2026-48863` · CVE record: OpenSUSE libsolv and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption - [Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write](https://agentprime.io/advisories/CVE-2026-3842.md) `CVE-2026-3842` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Memory corruption - [Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation](https://agentprime.io/advisories/CVE-2026-15779.md) `CVE-2026-15779` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Broken access control - [Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string](https://agentprime.io/advisories/CVE-2026-15714.md) `CVE-2026-15714` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption - [Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak](https://agentprime.io/advisories/CVE-2026-15713.md) `CVE-2026-15713` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service - [Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation](https://agentprime.io/advisories/CVE-2026-15711.md) `CVE-2026-15711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service - [Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service](https://agentprime.io/advisories/CVE-2026-15709.md) `CVE-2026-15709` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-409 - [Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)](https://agentprime.io/advisories/CVE-2026-12478.md) `CVE-2026-12478` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption - [Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header](https://agentprime.io/advisories/CVE-2026-15028.md) `CVE-2026-15028` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 10 Jul 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback](https://agentprime.io/advisories/CVE-2026-59692.md) `CVE-2026-59692` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer](https://agentprime.io/advisories/CVE-2026-59691.md) `CVE-2026-59691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification](https://agentprime.io/advisories/CVE-2026-15041.md) `CVE-2026-15041` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-208 - [389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption](https://agentprime.io/advisories/CVE-2026-14969.md) `CVE-2026-14969` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-329 - [Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check](https://agentprime.io/advisories/CVE-2026-14935.md) `CVE-2026-14935` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-670 - [389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn](https://agentprime.io/advisories/CVE-2026-14940.md) `CVE-2026-14940` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind](https://agentprime.io/advisories/CVE-2026-11610.md) `CVE-2026-11610` · CVE record: 389ds 389-ds-base and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md) `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal - [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md) `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188 - [Gimp: gimp: integer overflow in read_rle_channel()](https://agentprime.io/advisories/CVE-2026-58384.md) `CVE-2026-58384` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via integer overflow in playstation tim loader](https://agentprime.io/advisories/CVE-2026-59089.md) `CVE-2026-59089` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Memory corruption - [Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()](https://agentprime.io/advisories/CVE-2026-58380.md) `CVE-2026-58380` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-193 - [Gimp: gimp: heap buffer overflow in read_channel_data()](https://agentprime.io/advisories/CVE-2026-58379.md) `CVE-2026-58379` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.3 High · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization](https://agentprime.io/advisories/CVE-2026-14612.md) `CVE-2026-14612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Hplip: incomplete fix for cve-2026-8631](https://agentprime.io/advisories/CVE-2026-14544.md) `CVE-2026-14544` · CVE record: HP HPLIP and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Gimp: gimp: double-free in read_layer_block()](https://agentprime.io/advisories/CVE-2026-58381.md) `CVE-2026-58381` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption - [Pipewire: pulse server alloca stack overflow](https://agentprime.io/advisories/CVE-2026-14330.md) `CVE-2026-14330` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Pipewire: raop rtsp null deref](https://agentprime.io/advisories/CVE-2026-14324.md) `CVE-2026-14324` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption - [Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"](https://agentprime.io/advisories/CVE-2026-58016.md) `CVE-2026-58016` · CVE record: GNOME GLib and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md) `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal - [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md) `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193 - [Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"](https://agentprime.io/advisories/CVE-2026-58013.md) `CVE-2026-58013` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()](https://agentprime.io/advisories/CVE-2026-58012.md) `CVE-2026-58012` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime](https://agentprime.io/advisories/CVE-2026-58011.md) `CVE-2026-58011` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()](https://agentprime.io/advisories/CVE-2026-58010.md) `CVE-2026-58010` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .