# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Glibc: vdso getrandom acceleration may return predictable randomness](https://agentprime.io/advisories/CVE-2025-0577.md) `CVE-2025-0577` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-331 - [Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure](https://agentprime.io/advisories/CVE-2026-2443.md) `CVE-2026-2443` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Feb 2026 · Tags: Memory corruption - [Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification](https://agentprime.io/advisories/CVE-2025-14831.md) `CVE-2025-14831` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Denial of service - [Libsoup: libsoup: http request smuggling via malformed chunk headers](https://agentprime.io/advisories/CVE-2026-1801.md) `CVE-2026-1801` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: HTTP request smuggling - [Libsoup: soupserver: denial of service via http request smuggling](https://agentprime.io/advisories/CVE-2026-1760.md) `CVE-2026-1760` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: HTTP request smuggling - [Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response](https://agentprime.io/advisories/CVE-2026-1761.md) `CVE-2026-1761` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 2 Feb 2026 · Tags: Memory corruption - [Libxml2: memory leak leading to local denial of service in xmllint interactive shell](https://agentprime.io/advisories/CVE-2026-1757.md) `CVE-2026-1757` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service - [Libsoup: libsoup: credential leakage via http redirects](https://agentprime.io/advisories/CVE-2026-1539.md) `CVE-2026-1539` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Information disclosure - [Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header](https://agentprime.io/advisories/CVE-2026-1536.md) `CVE-2026-1536` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Other injection - [Glib: glib: memory corruption via integer overflow in unicode case conversion](https://agentprime.io/advisories/CVE-2026-1489.md) `CVE-2026-1489` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Glib: glib: local denial of service via buffer underflow in content type parsing](https://agentprime.io/advisories/CVE-2026-1485.md) `CVE-2026-1485` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()](https://agentprime.io/advisories/CVE-2026-1484.md) `CVE-2026-1484` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption - [Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured](https://agentprime.io/advisories/CVE-2026-1467.md) `CVE-2026-1467` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Other injection - [Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function](https://agentprime.io/advisories/CVE-2025-9820.md) `CVE-2025-9820` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Memory corruption - [Networkmanager: networkmanager file access](https://agentprime.io/advisories/CVE-2025-9615.md) `CVE-2025-9615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-281 - [Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()](https://agentprime.io/advisories/CVE-2026-0988.md) `CVE-2026-0988` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 21 Jan 2026 · Tags: Memory corruption - [Libxml2: libxml2: denial of service via crafted xml catalogs](https://agentprime.io/advisories/CVE-2026-0992.md) `CVE-2026-0992` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 2.9 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Libxml2: unbounded relaxng include recursion leading to stack overflow](https://agentprime.io/advisories/CVE-2026-0989.md) `CVE-2026-0989` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.7 Low · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing](https://agentprime.io/advisories/CVE-2026-0990.md) `CVE-2026-0990` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing](https://agentprime.io/advisories/CVE-2025-14242.md) `CVE-2025-14242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [Libsoup: out-of-bounds read in libsoup websocket frame processing](https://agentprime.io/advisories/CVE-2026-0716.md) `CVE-2026-0716` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption - [Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication](https://agentprime.io/advisories/CVE-2026-0719.md) `CVE-2026-0719` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jan 2026 · Tags: Memory corruption - [Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri](https://agentprime.io/advisories/CVE-2025-14946.md) `CVE-2025-14946` · CVE record: Red Hat libnbd and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: Command injection - [Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)](https://agentprime.io/advisories/CVE-2025-14523.md) `CVE-2025-14523` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 11 Dec 2025 · Tags: HTTP request smuggling - [Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow](https://agentprime.io/advisories/CVE-2025-14512.md) `CVE-2025-14512` · CVE record: GNOME glib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Memory corruption - [Glib: glib: buffer underflow in gvariant parser leads to heap corruption](https://agentprime.io/advisories/CVE-2025-14087.md) `CVE-2025-14087` · CVE record: GNOME glib and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: Memory corruption - [Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames](https://agentprime.io/advisories/CVE-2025-14104.md) `CVE-2025-14104` · CVE record: util-linux util-linux and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Memory corruption - [Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash](https://agentprime.io/advisories/CVE-2025-66287.md) `CVE-2025-66287` · CVE record: The WebKitGTK Team WebKitGTK and 4 more · CVSS 8.8 High · Not analysed yet · Published 4 Dec 2025 · Tags: Memory corruption - [Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop](https://agentprime.io/advisories/CVE-2025-13947.md) `CVE-2025-13947` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.4 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-346 - [Glib: integer overflow in in g_escape_uri_string()](https://agentprime.io/advisories/CVE-2025-13601.md) `CVE-2025-13601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.7 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption - [Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos](https://agentprime.io/advisories/CVE-2025-13502.md) `CVE-2025-13502` · CVE record: The WebKitGTK Team webkitgtk and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Nov 2025 · Tags: Memory corruption - [Grub2: use-after-free in net_set_vlan](https://agentprime.io/advisories/CVE-2025-54770.md) `CVE-2025-54770` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal_exit command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61664.md) `CVE-2025-61664` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for normal commands may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61663.md) `CVE-2025-61663` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: missing unregister call for gettext command may lead to use-after-free](https://agentprime.io/advisories/CVE-2025-61662.md) `CVE-2025-61662` · CVE record: GNU grub2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: grub2: out-of-bounds write via malicious usb device](https://agentprime.io/advisories/CVE-2025-61661.md) `CVE-2025-61661` · CVE record: GNU grub2 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Grub2: use-after-free in grub_file_close()](https://agentprime.io/advisories/CVE-2025-54771.md) `CVE-2025-54771` · CVE record: GNU grub2 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption - [Libvirt: information disclosure via world-readable vm snapshots](https://agentprime.io/advisories/CVE-2025-13193.md) `CVE-2025-13193` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Nov 2025 · Tags: Broken access control - [Python-kdcproxy: remote dos via unbounded tcp upstream buffering](https://agentprime.io/advisories/CVE-2025-59089.md) `CVE-2025-59089` · CVE record: latchset kdcproxy and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Denial of service - [Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv](https://agentprime.io/advisories/CVE-2025-59088.md) `CVE-2025-59088` · CVE record: latchset kdcproxy and 4 more · CVSS 8.6 High · Not analysed yet · Published 12 Nov 2025 · Tags: Server-side request forgery (SSRF) - [Libvirt: denial of service in xml parsing](https://agentprime.io/advisories/CVE-2025-12748.md) `CVE-2025-12748` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Denial of service - [Samba: command injection in wins server hook script](https://agentprime.io/advisories/CVE-2025-10230.md) `CVE-2025-10230` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.40 · Not analysed yet · Published 7 Nov 2025 · Tags: Command injection - [Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode](https://agentprime.io/advisories/CVE-2025-12464.md) `CVE-2025-12464` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: use-after-free in xpresentnotify structure creation](https://agentprime.io/advisories/CVE-2025-62229.md) `CVE-2025-62229` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in xkb client resource removal](https://agentprime.io/advisories/CVE-2025-62230.md) `CVE-2025-62230` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Xorg: xmayland: value overflow in xkbsetcompatmap()](https://agentprime.io/advisories/CVE-2025-62231.md) `CVE-2025-62231` · CVE record: X.Org Xwayland and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption - [Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion](https://agentprime.io/advisories/CVE-2025-12105.md) `CVE-2025-12105` · CVE record: GNOME libsoup and 4 more · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2025 · Tags: Memory corruption - [Luksmeta: data corruption when handling luks1 partitions with luksmeta](https://agentprime.io/advisories/CVE-2025-11568.md) `CVE-2025-11568` · CVE record: Latchset luksmeta and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284 - [Samba: vfs_streams_xattr uninitialized memory write possible](https://agentprime.io/advisories/CVE-2025-9640.md) `CVE-2025-9640` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [Libxslt: type confusion in exsltfuncresultcompfunction of libxslt](https://agentprime.io/advisories/CVE-2025-11731.md) `CVE-2025-11731` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.1 Low · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption - [Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems](https://agentprime.io/advisories/CVE-2025-11561.md) `CVE-2025-11561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation - [Qemu-kvm: vnc websocket handshake use-after-free](https://agentprime.io/advisories/CVE-2025-11234.md) `CVE-2025-11234` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption - [Freeipa: idm: privilege escalation from host to domain admin in freeipa](https://agentprime.io/advisories/CVE-2025-7493.md) `CVE-2025-7493` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-1220 - [Libsoup: out-of-bounds read in cookie date handling of libsoup http library](https://agentprime.io/advisories/CVE-2025-11021.md) `CVE-2025-11021` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: Memory corruption - [Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()](https://agentprime.io/advisories/CVE-2025-60019.md) `CVE-2025-60019` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"](https://agentprime.io/advisories/CVE-2025-60018.md) `CVE-2025-60018` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libxslt: use-after-free with key data stored cross-rvt](https://agentprime.io/advisories/CVE-2025-10911.md) `CVE-2025-10911` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Libtiff: libtiff write-what-where](https://agentprime.io/advisories/CVE-2025-9900.md) `CVE-2025-9900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-123 - [Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation](https://agentprime.io/advisories/CVE-2025-5962.md) `CVE-2025-5962` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 1 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2025 · Tags: Broken access control - [Libssh: memory exhaustion via repeated key exchange in libssh](https://agentprime.io/advisories/CVE-2025-8277.md) `CVE-2025-8277` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2025 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .