# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106064.md) `CVE-2026-106064` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null dereference in minput_open_im() after failed m17n_init()](https://agentprime.io/advisories/CVE-2026-107170.md) `CVE-2026-107170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.9 Low · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()](https://agentprime.io/advisories/CVE-2026-107168.md) `CVE-2026-107168` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file](https://agentprime.io/advisories/CVE-2026-106061.md) `CVE-2026-106061` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Sssd: sssd-kcm: local denial of service via excessive memory preallocation](https://agentprime.io/advisories/CVE-2026-80048.md) `CVE-2026-80048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via race condition in autofs responder](https://agentprime.io/advisories/CVE-2026-104045.md) `CVE-2026-104045` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via incomplete identity provider authentication requests](https://agentprime.io/advisories/CVE-2026-104046.md) `CVE-2026-104046` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file](https://agentprime.io/advisories/CVE-2026-106062.md) `CVE-2026-106062` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free](https://agentprime.io/advisories/CVE-2026-101258.md) `CVE-2026-101258` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106063.md) `CVE-2026-106063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md) `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025 - [Sssd: sssd: information disclosure via query injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104047.md) `CVE-2026-104047` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion](https://agentprime.io/advisories/CVE-2026-88252.md) `CVE-2026-88252` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via crafted passkey kerberos authentication request](https://agentprime.io/advisories/CVE-2026-104044.md) `CVE-2026-104044` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via undersized packet parsing in nss responder](https://agentprime.io/advisories/CVE-2026-104043.md) `CVE-2026-104043` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read in pam responder](https://agentprime.io/advisories/CVE-2026-104042.md) `CVE-2026-104042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md) `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: information disclosure via odata injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104040.md) `CVE-2026-104040` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder](https://agentprime.io/advisories/CVE-2026-104039.md) `CVE-2026-104039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via missing sid extension in certificate mapping](https://agentprime.io/advisories/CVE-2026-104038.md) `CVE-2026-104038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via packet length underflow in autofs responder](https://agentprime.io/advisories/CVE-2026-104037.md) `CVE-2026-104037` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via premature ldap access rule evaluation](https://agentprime.io/advisories/CVE-2026-92821.md) `CVE-2026-92821` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-393 - [Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin](https://agentprime.io/advisories/CVE-2026-104036.md) `CVE-2026-104036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md) `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via use-after-free in kcm ticket renewal](https://agentprime.io/advisories/CVE-2026-104034.md) `CVE-2026-104034` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md) `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193 - [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md) `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408 - [Sssd: sssd: denial of service via memory exhaustion in autofs responder](https://agentprime.io/advisories/CVE-2026-104031.md) `CVE-2026-104031` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via out-of-bounds read in autofs responder](https://agentprime.io/advisories/CVE-2026-104029.md) `CVE-2026-104029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read during passkey parsing](https://agentprime.io/advisories/CVE-2026-104030.md) `CVE-2026-104030` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Cups: cups: argument injection in mailto notifier via notify-recipient-uri](https://agentprime.io/advisories/CVE-2026-105326.md) `CVE-2026-105326` · CVE record: Red Hat Red Hat Hardened Images and 3 more · CVSS 2.5 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection - [Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject](https://agentprime.io/advisories/CVE-2026-104988.md) `CVE-2026-104988` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass - [xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape](https://agentprime.io/advisories/CVE-2026-94422.md) `CVE-2026-94422` · CVE record: Fedora Fedora and 2 more · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass - [Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader](https://agentprime.io/advisories/CVE-2026-95512.md) `CVE-2026-95512` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service - [389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result](https://agentprime.io/advisories/CVE-2026-86345.md) `CVE-2026-86345` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-923 - [389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue](https://agentprime.io/advisories/CVE-2026-86344.md) `CVE-2026-86344` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder](https://agentprime.io/advisories/CVE-2026-103641.md) `CVE-2026-103641` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption - [Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body](https://agentprime.io/advisories/CVE-2026-103399.md) `CVE-2026-103399` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: HTTP request smuggling - [Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag](https://agentprime.io/advisories/CVE-2026-103242.md) `CVE-2026-103242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth](https://agentprime.io/advisories/CVE-2026-102560.md) `CVE-2026-102560` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket client-frame masking](https://agentprime.io/advisories/CVE-2026-102559.md) `CVE-2026-102559` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth](https://agentprime.io/advisories/CVE-2026-102558.md) `CVE-2026-102558` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding](https://agentprime.io/advisories/CVE-2026-102555.md) `CVE-2026-102555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket message reassembly](https://agentprime.io/advisories/CVE-2026-102557.md) `CVE-2026-102557` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion](https://agentprime.io/advisories/CVE-2026-102556.md) `CVE-2026-102556` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages](https://agentprime.io/advisories/CVE-2026-95520.md) `CVE-2026-95520` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group](https://agentprime.io/advisories/CVE-2026-97029.md) `CVE-2026-97029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.7 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-653 - [Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc](https://agentprime.io/advisories/CVE-2026-97024.md) `CVE-2026-97024` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-61 - [Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files](https://agentprime.io/advisories/CVE-2026-97027.md) `CVE-2026-97027` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.6 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20 - [Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97026.md) `CVE-2026-97026` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378 - [Flatpak: flatpak: world-readable oci authentication token in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97025.md) `CVE-2026-97025` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378 - [Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if](https://agentprime.io/advisories/CVE-2026-102010.md) `CVE-2026-102010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: Memory corruption - [Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin](https://agentprime.io/advisories/CVE-2026-97023.md) `CVE-2026-97023` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-61 - [Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following](https://agentprime.io/advisories/CVE-2026-96284.md) `CVE-2026-96284` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.5 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Flatpak: flatpak: extension metadata path traversal file existence oracle](https://agentprime.io/advisories/CVE-2026-96282.md) `CVE-2026-96282` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.1 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull](https://agentprime.io/advisories/CVE-2026-96283.md) `CVE-2026-96283` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Broken access control - [Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes](https://agentprime.io/advisories/CVE-2026-96281.md) `CVE-2026-96281` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Broken access control - [Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems](https://agentprime.io/advisories/CVE-2026-96280.md) `CVE-2026-96280` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-197 - [Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks](https://agentprime.io/advisories/CVE-2026-96279.md) `CVE-2026-96279` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Path traversal - [Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape](https://agentprime.io/advisories/CVE-2026-93834.md) `CVE-2026-93834` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .