Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Red Hat Enterprise Linux 9 Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-88914`Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser	Exploitation statusNot confirmed	FixNot confirmed	Published09/11/2026	SeverityMedium
`CVE-2026-88924`Gvfs: gvfs-admin socket ownership race permits local root	Exploitation statusPublic exploit	FixNot confirmed	Published09/10/2026	SeverityHigh
`CVE-2026-88859`Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction	Exploitation statusNot known exploited	FixNot confirmed	Published09/10/2026	SeverityMedium
`CVE-2026-84828`Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	Exploitation statusNot confirmed	FixNot confirmed	Published09/10/2026	SeverityMedium
`CVE-2026-18147`Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url	Exploitation statusNot known exploited	FixNot confirmed	Published09/09/2026	SeverityHigh
`CVE-2026-87876`Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)	Exploitation statusPublic exploit	FixNot confirmed	Published09/09/2026	SeverityLow
`CVE-2026-87875`Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound	Exploitation statusPublic exploit	FixNot confirmed	Published09/09/2026	SeverityMedium
`CVE-2026-87853`Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation	Exploitation statusNot known exploited	FixNot confirmed	Published09/09/2026	SeverityHigh
`CVE-2026-87766`Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup	Exploitation statusNot known exploited	FixYes	Published09/09/2026	SeverityHigh
`CVE-2026-86564`Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler	Exploitation statusNot known exploited	FixNot confirmed	Published09/08/2026	SeverityLow
`CVE-2026-18090`Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block	Exploitation statusNot confirmed	FixNot confirmed	Published09/08/2026	SeverityMedium
`CVE-2026-74860`Libxml2: double-free/uaf in libxml2 python bindings	Exploitation statusNot known exploited	FixNot confirmed	Published09/08/2026	SeverityHigh
`CVE-2026-74859`Gnome-tweaks: path traversal in theme installer	Exploitation statusNot known exploited	FixNot confirmed	Published09/08/2026	SeverityMedium
`CVE-2026-76561`Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	Exploitation statusNot known exploited	FixNot confirmed	Published09/08/2026	SeverityHigh
`CVE-2026-86469`Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	Exploitation statusPublic exploit	FixNot confirmed	Published09/07/2026	SeverityMedium
`CVE-2026-19843`389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityHigh
`CVE-2026-18922`389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityCritical
`CVE-2026-18453`389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityHigh
`CVE-2026-18355`389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityHigh
`CVE-2026-76560`389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityHigh
`CVE-2026-79678`Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityHigh
`CVE-2026-76578`Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci	Exploitation statusNot known exploited	FixNot confirmed	Published09/07/2026	SeverityCritical
`CVE-2026-76925`Flatpak: flatpak: toctou race condition allows symlink redirection	Exploitation statusNot known exploited	FixNot confirmed	Published09/04/2026	SeverityMedium
`CVE-2026-85769`Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize	Exploitation statusNot known exploited	FixNot confirmed	Published09/04/2026	SeverityMedium
`CVE-2026-85534`Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read	Exploitation statusNot known exploited	FixNot confirmed	Published09/04/2026	SeverityMedium
`CVE-2026-81666`Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems	Exploitation statusNot known exploited	FixNot confirmed	Published09/04/2026	SeverityMedium
`CVE-2026-81665`Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly	Exploitation statusNot known exploited	FixNot confirmed	Published09/04/2026	SeverityHigh
`CVE-2026-85197`Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload	Exploitation statusPublic exploit	FixNot confirmed	Published09/04/2026	SeverityHigh
`CVE-2026-84185`Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityMedium
`CVE-2026-71224`Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityMedium
`CVE-2026-71222`Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityMedium
`CVE-2026-71221`Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityHigh
`CVE-2026-71220`Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityHigh
`CVE-2026-71219`Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityMedium
`CVE-2026-85150`Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2026	SeverityHigh
`CVE-2026-84838`Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()	Exploitation statusNot known exploited	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-84837`Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	Exploitation statusNot known exploited	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78409`Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78410`Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78408`Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-53683`Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html	Exploitation statusNot known exploited	FixNot confirmed	Published09/02/2026	SeverityMedium
`CVE-2026-84270`Gvfs: mtp: out-of-bounds read in do_read()	Exploitation statusNot known exploited	FixYes	Published09/01/2026	SeverityMedium
`CVE-2026-84269`Gvfs: afp: heap-based buffer overflow in dsi read path	Exploitation statusPublic exploit	FixYes	Published09/01/2026	SeverityMedium
`CVE-2026-84267`Gvfs: sftp: uninitialized heap disclosure in read_string()	Exploitation statusPublic exploit	FixYes	Published09/01/2026	SeverityMedium
`CVE-2026-84268`Gvfs: sftp: heap-based buffer overflow in read_reply()	Exploitation statusNot known exploited	FixYes	Published09/01/2026	SeverityHigh
`CVE-2026-84233`Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityHigh
`CVE-2026-53682`Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityMedium
`CVE-2026-11873`Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityMedium
`CVE-2026-18743`Popt-devel: popt-static: short realloc in poptconfigfiletostring	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityLow
`CVE-2026-83596`Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature	Exploitation statusNot known exploited	FixNot confirmed	Published08/31/2026	SeverityHigh
`CVE-2026-13732`Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf	Exploitation statusNot known exploited	FixNot confirmed	Published08/31/2026	SeverityHigh
`CVE-2026-17615`Resteasy-core: resteasy sourceprovider remote unauthenticated file read	Exploitation statusNot known exploited	FixNot confirmed	Published08/31/2026	SeverityHigh
`CVE-2026-81624`Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite	Exploitation statusNot known exploited	FixNot confirmed	Published08/31/2026	SeverityHigh
`CVE-2026-82343`Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82330`Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check	Exploitation statusPublic exploit	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82328`Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count	Exploitation statusPublic exploit	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82327`Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82324`Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-80179`Jwcrypto: jwcrypto: denial of service via malformed jwe tokens	Exploitation statusPublic exploit	FixNot confirmed	Published08/27/2026	SeverityMedium
`CVE-2026-81893`Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery	Exploitation statusNot known exploited	FixNot confirmed	Published08/27/2026	SeverityMedium
`CVE-2026-5680`Undertow-core: undertow: denial of service via websocket permessage-deflate processing	Exploitation statusNot known exploited	FixNot confirmed	Published08/27/2026	SeverityHigh
`CVE-2026-78002`Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function	Exploitation statusNot known exploited	FixNot confirmed	Published08/27/2026	SeverityHigh
`CVE-2026-79902`Gimp: stack vla size underflow denial of service in seattle	Exploitation statusPublic exploit	FixNot confirmed	Published08/26/2026	SeverityMedium
`CVE-2026-80185`Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root	Exploitation statusNot known exploited	FixNot confirmed	Published08/25/2026	SeverityMedium
`CVE-2026-80186`Bluez: stack overflow in name2utf8 causes dos and potential code execution	Exploitation statusNot known exploited	FixNot confirmed	Published08/25/2026	SeverityHigh
`CVE-2026-80101`Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation	Exploitation statusPublic exploit	FixNot confirmed	Published08/25/2026	SeverityMedium
`CVE-2026-79992`Emacs: local shell command injection through the user field in emacs tramp	Exploitation statusNot known exploited	FixNot confirmed	Published08/25/2026	SeverityHigh
`CVE-2026-79655`Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write	Exploitation statusPublic exploit	FixNot confirmed	Published08/25/2026	SeverityHigh
`CVE-2026-78701`389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos	Exploitation statusNot known exploited	FixNot confirmed	Published08/25/2026	SeverityMedium
`CVE-2026-78475`Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityMedium
`CVE-2026-78465`Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit	Exploitation statusPublic exploit	FixNot confirmed	Published08/24/2026	SeverityHigh
`CVE-2026-19685`Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityCritical
`CVE-2026-78367`Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	Exploitation statusPublic exploit	FixNot confirmed	Published08/24/2026	SeverityHigh
`CVE-2026-78376`Webkitgtk: use-after-free of jscvalue function parameters	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityHigh
`CVE-2026-78323`Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityMedium
`CVE-2026-73199`Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value	Exploitation statusPublic exploit	FixNot confirmed	Published08/20/2026	SeverityMedium
`CVE-2026-11861`Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityCritical
`CVE-2026-73198`Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-13097`Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-73196`Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityMedium
`CVE-2026-73197`Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-18917`Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-77014`Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityMedium
`CVE-2026-19582`CVE-2026-19582	Exploitation statusNot confirmed	FixNot confirmed	Published08/20/2026	SeverityUnknown
`CVE-2026-43961`Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	Exploitation statusNot known exploited	FixYes	Published08/19/2026	SeverityHigh
`CVE-2026-76235`Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html	Exploitation statusNot known exploited	FixNot confirmed	Published08/19/2026	SeverityHigh
`CVE-2026-75900`Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch	Exploitation statusNot known exploited	FixNot confirmed	Published08/19/2026	SeverityMedium
`CVE-2026-75032`Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder	Exploitation statusNot known exploited	FixNot confirmed	Published08/18/2026	SeverityMedium
`CVE-2026-13002`Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19879`Io.undertow/undertow: undertow: http response header integrity issue due to character truncation	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-58224`Samba: ctdb fails to do integrity checking of received packets	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19617`Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19730`Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	Exploitation statusPublic exploit	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-73584`Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-73583`Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-73585`Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-18728`Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-18727`Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-18726`Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-19654`Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityHigh

100 / 1,284 Results

Security vulnerabilities in Red Hat Enterprise Linux 9

Red Hat Enterprise Linux 9

Verify to analyze this security profile

How many security vulnerabilities does Red Hat Enterprise Linux 9 have?

Does the latest Red Hat Enterprise Linux 9 version have known vulnerabilities?

Run an in-depth assessment with complete web risk management