Red Hat Red Hat Enterprise Linux 9

Name: Red Hat Red Hat Enterprise Linux 9
Brand: Red Hat

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical74high93medium5low

updated 2026-10-28

vulnerabilities (382)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	≤ vers:unknown/*
CVE-2023-4911US	high7.8OT critical	63.8% (99th)	KEV	0:2.34-60.el9_2.7	2023-10-03	< 0:2.34-60.el9_2.7
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	0:8.7p1-38.el9_4.1	2024-07-01	< 0:8.7p1-38.el9_4.1
CVE-2026-4631US	—	15.5% (97th)	Exploit	0:344-2.el9_7	2026-04-07	< 0:344-2.el9_7
CVE-2026-4480US	—	13.9% (97th)	Exploit	0:4.23.5-10.el9_8	2026-05-26	< 0:4.23.5-10.el9_8
CVE-2023-5178US	high8.8	9.62% (95th)	Exploit	0:5.14.0-362.18.1.el9_3	2023-11-01	< 0:5.14.0-362.18.1.el9_3
CVE-2024-12085US	—	8.64% (95th)	Exploit	0:3.2.3-20.el9_5.1	2025-01-14	< 0:3.2.3-20.el9_5.1
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	0:8.7p1-45.el9	2025-02-18	< 0:8.7p1-45.el9
CVE-2026-4408US	critical9.8	2.50% (85th)	Exploit	0:4.23.5-10.el9_8	2026-05-28	< 0:4.23.5-10.el9_8
CVE-2023-6710US	medium5.4	2.24% (83rd)	Exploit	0:1.3.20-1.el9_4	2023-12-12	< 0:1.3.20-1.el9_4
CVE-2023-4813US	medium5.9	2.22% (83rd)	Exploit	0:2.34-60.el9_2.7	2023-09-12	2 versions
CVE-2023-52356US	high7.5	2.19% (82nd)	Exploit	0:4.4.0-15.el9	2024-01-25	< 0:4.4.0-15.el9
CVE-2024-3183US	high8.1	2.04% (81st)	Exploit	0:4.11.0-15.el9_4	2024-06-12	< 0:4.11.0-15.el9_4
CVE-2025-4404US	—	1.99% (81st)	Exploit	0:4.12.2-14.el9_6.1	2025-06-17	< 0:4.12.2-14.el9_6.1
CVE-2024-8176US	—	1.35% (71st)	Exploit	0:2.5.0-5.el9_6	2025-03-14	2 versions
CVE-2026-5201US	—	1.07% (65th)	Exploit	0:2.42.6-6.el9_7.1	2026-03-31	2 versions
CVE-2026-4802US	—	1.02% (63rd)	Exploit	0:356.2-1.el9_8	2026-05-11	< 0:356.2-1.el9_8
CVE-2026-18649US	—	0.96% (61st)	Exploit	0:1.22.12-7.el9_8.2	2026-08-06	< 0:1.22.12-7.el9_8.2
CVE-2025-0690US	—	0.79% (56th)	Exploit	1:2.06-104.el9_6	2025-02-24	< 1:2.06-104.el9_6
CVE-2023-6546US	high7.0	0.73% (54th)	Exploit	0:5.14.0-427.13.1.el9_4	2023-12-21	< 0:5.14.0-427.13.1.el9_4
CVE-2023-4147US	high7.8	0.56% (46th)	Exploit	0:5.14.0-284.30.1.rt14.315.el9_2	2023-08-07	2 versions
CVE-2025-6019US	—	0.48% (41st)	Exploit	0:2.28-14.el9_6	2025-06-19	< 0:2.28-14.el9_6
CVE-2023-43786US	medium5.5	0.47% (41st)	Exploit	0:1.7.0-9.el9	2023-10-10	< 0:1.7.0-9.el9
CVE-2025-5222US	—	0.44% (38th)	Exploit	0:67.1-10.el9_6	2025-05-27	< 0:67.1-10.el9_6
CVE-2024-1441US	—	0.40% (34th)	Exploit	0:10.0.0-6.2.el9_4	2024-03-11	< 0:10.0.0-6.2.el9_4
CVE-2025-12748US	—	0.22% (13th)	Exploit	0:11.10.0-12.el9_8	2025-11-11	< 0:11.10.0-12.el9_8
CVE-2023-46847US	high7.5	78.5% (100th)	—	7:5.5-5.el9_2.1	2023-11-03	2 versions
CVE-2023-34966US	high7.5	62.4% (99th)	—	0:4.18.6-100.el9	2023-07-20	< 0:4.18.6-100.el9
CVE-2023-34967US	medium5.3	61.2% (99th)	—	0:4.18.6-100.el9	2023-07-20	< 0:4.18.6-100.el9
CVE-2024-6409US	—	27.9% (98th)	—	0:8.7p1-38.el9_4.4	2024-07-08	< 0:8.7p1-38.el9_4.4
CVE-2025-3155US	—	13.1% (96th)	—	2:40.3-2.el9_6.1	2025-04-03	< 2:40.3-2.el9_6.1
CVE-2023-46848US	high7.5	10.5% (96th)	—	7:5.5-5.el9_2.1	2023-11-03	2 versions
CVE-2023-46846US	medium5.3	6.60% (94th)	—	7:5.5-5.el9_2.1	2023-11-03	2 versions
CVE-2026-1709US	critical9.8OT elevated	5.79% (93rd)	—	0:7.12.1-11.el9_7.4	2026-02-06	< 0:7.12.1-11.el9_7.4
CVE-2023-40547US	high8.3	5.42% (93rd)	—	0:15.8-4.el9_3	2024-01-25	< 0:15.8-4.el9_3
CVE-2024-12088US	high7.5	4.65% (92nd)	—	0:3.2.5-3.el9	2025-01-14	< 0:3.2.5-3.el9
CVE-2023-5869US	high8.8	4.32% (91st)	—	0:13.13-1.el9_3	2023-12-10	2 versions
CVE-2023-5824US	high7.5	3.03% (87th)	—	7:5.5-6.el9_3.2	2023-11-03	< 7:5.5-6.el9_3.2
CVE-2023-5868US	medium4.3	2.77% (86th)	—	9030020231120082734.rhel9	2023-12-10	2 versions
CVE-2023-3961US	critical9.8	2.69% (86th)	—	0:4.18.6-101.el9_3	2023-11-03	< 0:4.18.6-101.el9_3
CVE-2025-1244US	—	2.63% (85th)	—	1:27.2-11.el9_5.1	2025-02-12	< 1:27.2-11.el9_5.1
CVE-2023-5870US	medium4.4	2.56% (85th)	—	0:13.13-1.el9_3	2023-12-10	2 versions
CVE-2024-12087US	high7.5	2.26% (83rd)	—	0:3.2.5-3.el9	2025-01-14	< 0:3.2.5-3.el9
CVE-2023-5157US	high7.5	2.26% (83rd)	—	0:26.4.14-1.el9_2	2023-09-27	2 versions
CVE-2023-6816US	critical9.8	2.11% (82nd)	—	0:22.1.9-5.el9	2024-01-18	3 versions
CVE-2026-33845US	critical9.1	2.07% (81st)	—	0:3.8.10-4.el9_8	2026-04-30	< 0:3.8.10-4.el9_8
CVE-2023-42669US	medium6.5	1.94% (80th)	—	0:4.18.6-101.el9_3	2023-11-06	< 0:4.18.6-101.el9_3
CVE-2023-3255US	medium6.5	1.89% (79th)	—	17:8.2.0-11.el9_4	2023-09-13	< 17:8.2.0-11.el9_4
CVE-2024-31083US	—	1.86% (79th)	—	0:23.2.7-1.el9	2024-04-05	3 versions
CVE-2025-5318US	—	1.84% (79th)	—	0:0.10.4-15.el9_7	2025-06-24	2 versions

showing 50 of 382

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write38 CVEs
CWE-125Out-of-bounds Read37 CVEs
CWE-416Use After Free32 CVEs
CWE-122Heap-based Buffer Overflow26 CVEs
CWE-190Integer Overflow or Wraparound24 CVEs
CWE-476NULL Pointer Dereference21 CVEs
CWE-121Stack-based Buffer Overflow20 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')13 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)381 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan