RH
Product
Red Hat Enterprise Linux 9.4 Extended Update Support
by Red Hat · last CVE May 23, 2026
On CISA KEVExploited in the wild
294
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 61High 181Medium 50Low 2
Watch

Add Red Hat Enterprise Linux 9.4 Extended Update Support to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-46421
6.8
1%
Apr 24
Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server
Affected: All versions, or not specified
CVE-2025-26465
6.8
8%
Feb 18
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
Affected: All versions, or not specified
CVE-2026-39979
6.5
1%
Apr 13
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Affected: All versions, or not specified
CVE-2026-33983
6.5
0%
Mar 30
FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS
Affected: All versions, or not specified
CVE-2026-28857
6.5
1%
Mar 25
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2025-12801
6.5
0%
Mar 4
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
Affected: All versions, or not specified
CVE-2026-20644
6.5
0%
Feb 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-20636
6.5
0%
Feb 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-26007
6.5
0%
Feb 10
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Affected: All versions, or not specified
CVE-2025-14242
6.5
1%
Jan 14
Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing
Affected: All versions, or not specified
CVE-2025-43511
6.5
0%
Dec 12
A use-after-free issue was addressed with improved memory management
Affected: All versions, or not specified
CVE-2025-14512
6.5
1%
Dec 11
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Affected: All versions, or not specified
CVE-2025-43457
6.5
1%
Nov 4
A use-after-free issue was addressed with improved memory management
Affected: All versions, or not specified
CVE-2025-43214
6.5
1%
Jul 29
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2025-43213
6.5
1%
Jul 29
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2025-6395
6.5
1%
Jul 10
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
Affected: All versions, or not specified
CVE-2025-46420
6.5
1%
Apr 24
Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
Affected: All versions, or not specified
CVE-2025-32053
6.5
1%
Apr 3
Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
Affected: All versions, or not specified
CVE-2025-32052
6.5
1%
Apr 3
Libsoup: heap buffer overflow in sniff_unknown()
Affected: All versions, or not specified
CVE-2025-2784
6.5
1%
Apr 3
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
Affected: All versions, or not specified
CVE-2024-9676
6.5
1%
Oct 15
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
Affected: All versions, or not specified
CVE-2024-9355
6.5
0%
Oct 1
Golang-fips: golang fips zeroed buffer
Affected: All versions, or not specified
CVE-2025-49177
6.1
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
Affected: All versions, or not specified
CVE-2025-49175
6.1
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
Affected: All versions, or not specified
CVE-2025-59089
5.9
1%
Nov 12
Python-kdcproxy: remote dos via unbounded tcp upstream buffering
Affected: All versions, or not specified
CVE-2025-3576
5.9
0%
Apr 15
Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
Affected: All versions, or not specified
CVE-2025-32050
5.9
1%
Apr 3
Libsoup: integer overflow in append_param_quoted
Affected: All versions, or not specified
CVE-2024-2236
5.9
1%
Mar 6
Libgcrypt: vulnerable to marvin attack
Affected: All versions, or not specified
CVE-2026-23401
5.5
0%
Apr 1
KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
Affected: All versions, or not specified
CVE-2026-20608
5.5
0%
Feb 11
This issue was addressed through improved state management
Affected: All versions, or not specified
CVE-2026-24049
5.5
0%
Jan 22
wheel Allows Arbitrary File Permission Modification via Path Traversal
Affected: All versions, or not specified
CVE-2025-49178
5.5
0%
Jun 17
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
Affected: All versions, or not specified
CVE-2024-52337
5.5
0%
Nov 26
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
Affected: All versions, or not specified
CVE-2024-0340
5.5
0%
Jan 9
Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()
Affected: All versions, or not specified
CVE-2025-5318
5.4
2%
Jun 24
Libssh: out-of-bounds read in sftp_handle()
Affected: All versions, or not specified
CVE-2024-10306
5.4
0%
Apr 23
Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests
Affected: All versions, or not specified
CVE-2025-14831
5.3
1%
Feb 9
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Affected: All versions, or not specified
CVE-2025-13465
5.3
2%
Jan 21
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Affected: All versions, or not specified
CVE-2025-32989
5.3
1%
Jul 10
Gnutls: vulnerability in gnutls sct extension parsing
Affected: All versions, or not specified
CVE-2025-32907
5.3
1%
Apr 14
Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header
Affected: All versions, or not specified
CVE-2024-12243
5.3
1%
Feb 10
Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
Affected: All versions, or not specified
CVE-2024-12133
5.3
1%
Feb 10
Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Affected: All versions, or not specified
CVE-2026-23868
5.1
0%
Mar 10
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling
Affected: All versions, or not specified
CVE-2025-2487
4.9
1%
Mar 18
389-ds-base: null pointer dereference leads to denial of service
Affected: All versions, or not specified
CVE-2025-4373
4.8
1%
May 6
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Affected: All versions, or not specified
CVE-2024-10041
4.7
0%
Oct 23
Pam: libpam: libpam vulnerable to read hashed password
Affected: All versions, or not specified
CVE-2024-9407
4.7
0%
Oct 1
Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
Affected: All versions, or not specified
CVE-2026-20664
4.3
1%
Mar 25
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-28859
4.3
1%
Mar 25
The issue was addressed with improved memory handling
Affected: All versions, or not specified
CVE-2026-20635
4.3
0%
Feb 11
The issue was addressed with improved memory handling
Affected: All versions, or not specified
Showing 50