RH
Product
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
On CISA KEVExploited in the wild
449
CVEs
4
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 84High 299Medium 63Low 3
Watch
Add Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28902 | 6.5 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: All versions, or not specified |
| CVE-2026-33983 | 6.5 | Mar 30 | FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS Affected: All versions, or not specified |
| CVE-2026-28857 | 6.5 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20644 | 6.5 | Feb 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20636 | 6.5 | Feb 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-26007 | 6.5 | Feb 10 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Affected: All versions, or not specified |
| CVE-2025-14242 | 6.5 | Jan 14 | Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing Affected: All versions, or not specified |
| CVE-2025-43511 | 6.5 | Dec 12 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2025-14512 | 6.5 | Dec 11 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow Affected: All versions, or not specified |
| CVE-2025-43457 | 6.5 | Nov 4 | A use-after-free issue was addressed with improved memory management Affected: All versions, or not specified |
| CVE-2025-43214 | 6.5 | Jul 29 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2025-43213 | 6.5 | Jul 29 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2025-6395 | 6.5 | Jul 10 | Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() Affected: All versions, or not specified |
| CVE-2024-9355 | 6.5 | Oct 1 | Golang-fips: golang fips zeroed buffer Affected: All versions, or not specified |
| CVE-2026-73434 | 6.1 | Aug 12 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing Affected: All versions, or not specified |
| CVE-2026-55655 | 6.1 | Jun 23 | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions Affected: All versions, or not specified |
| CVE-2025-49175 | 6.1 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors Affected: All versions, or not specified |
| CVE-2025-59089 | 5.9 | Nov 12 | Python-kdcproxy: remote dos via unbounded tcp upstream buffering Affected: All versions, or not specified |
| CVE-2025-3576 | 5.9 | Apr 15 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions Affected: All versions, or not specified |
| CVE-2026-50263 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() Affected: All versions, or not specified |
| CVE-2026-50262 | 5.5 | Jun 5 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Affected: All versions, or not specified |
| CVE-2026-23401 | 5.5 | Apr 1 | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Affected: All versions, or not specified |
| CVE-2026-20608 | 5.5 | Feb 11 | This issue was addressed through improved state management Affected: All versions, or not specified |
| CVE-2025-10911 | 5.5 | Sep 25 | Libxslt: use-after-free with key data stored cross-rvt Affected: All versions, or not specified |
| CVE-2025-49178 | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore Affected: All versions, or not specified |
| CVE-2026-12299 | 5.4 | Jun 16 | JIT miscompilation in the DOM: Core & HTML component Affected: All versions, or not specified |
| CVE-2026-12298 | 5.4 | Jun 16 | Memory safety bug fixed in Thunderbird 152 Affected: All versions, or not specified |
| CVE-2025-5318 | 5.4 | Jun 24 | Libssh: out-of-bounds read in sftp_handle() Affected: All versions, or not specified |
| CVE-2026-15588 | 5.3 | Jul 20 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected: All versions, or not specified |
| CVE-2026-12329 | 5.3 | Jun 16 | Memory safety bug fixed in Thunderbird ESR 140.12 Affected: All versions, or not specified |
| CVE-2026-42015 | 5.3 | May 26 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected: All versions, or not specified |
| CVE-2026-8391 | 5.3 | May 12 | Other issue in the JavaScript Engine component Affected: All versions, or not specified |
| CVE-2026-42258 | 5.3 | May 9 | net-imap: Command Injection via unvalidated Symbol inputs Affected: All versions, or not specified |
| CVE-2025-14831 | 5.3 | Feb 9 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2025-32989 | 5.3 | Jul 10 | Gnutls: vulnerability in gnutls sct extension parsing Affected: All versions, or not specified |
| CVE-2024-12243 | 5.3 | Feb 10 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos Affected: All versions, or not specified |
| CVE-2024-12133 | 5.3 | Feb 10 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos Affected: All versions, or not specified |
| CVE-2026-23868 | 5.1 | Mar 10 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: All versions, or not specified |
| CVE-2026-42006 | 4.3 | May 12 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP Affected: All versions, or not specified |
| CVE-2026-28901 | 4.3 | May 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20664 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28859 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20635 | 4.3 | Feb 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2025-4945 | 3.7 | May 19 | Libsoup: integer overflow in cookie expiration date handling in libsoup Affected: All versions, or not specified |
| CVE-2026-4519 | 3.3 | Mar 20 | webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified |
| CVE-2025-6170 | 2.5 | Jun 16 | Libxml2: stack buffer overflow in xmllint interactive shell command handling Affected: All versions, or not specified |
