Red hat enterprise linux 9.6 extended update support
This hub aggregates every CVE we track for Red hat enterprise linux 9.6 extended update support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
123
CVEs tracked
4
Critical
86
High
0
In CISA KEV
Severity distribution
HIGH86MEDIUM31CRITICAL4LOW2
Monthly trend
1
0
0
1
0
0
1
0
1
1
0
1
1
6
5
2
3
8
9
18
36
12
8
7
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Red hat enterprise linux 9.6 extended update support.
- CVE-2026-92925Redis: redis: out-of-bounds read via crafted cluster bus packets7.1
- CVE-2026-75092Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins7.3
- CVE-2026-18922389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property9.8
- CVE-2026-18453389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search7.5
- CVE-2026-18355389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()7.5
- CVE-2026-76560389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn7.5
- CVE-2026-81665Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly7.5
- CVE-2026-18917Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow7.8
- CVE-2026-73433Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write6.6
- CVE-2026-73434Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing6.1
- CVE-2026-63622Libvirt: swtpm privilege escalation via symlink following7.8
- CVE-2026-19389Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read7.1
- CVE-2026-19387Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder7.6
- CVE-2026-15816Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()7.5
- CVE-2026-18649Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders7.5
Product normalization is registry-driven with AI assist and human review. How it works