Skip to contentRed Hat Enterprise Linux 10.0 Extended Update Support vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morewifi: mac80211: drop stray 'static' from fast-RX rx_resultCVE-2026-46152Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 moreRDMA/mana: Validate rx_hash_key_lenCVE-2026-46145Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep failsCVE-2026-46125Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteCVE-2026-46116Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsCVE-2026-46099Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreALSA: aloop: Fix peer runtime UAF during format-change stopCVE-2026-46090Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreselinux: fix overlayfs mmap() and mprotect() access checksCVE-2026-46054Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/iwcm: Fix workqueue list corruption by removing work_listCVE-2026-45898Fix available9.8 Critical
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- linux, linux kernel, red hat enterprise linux 10 +8 more +10 morerxrpc: Fix potential UAF after skb_unshare() failureCVE-2026-45998Fix available7.8 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB: mysql_real_escape_string() incorrectly handled big5CVE-2026-44172Fix available6.9 Medium
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLCVE-2026-44170Fix available6.3 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreSamba: samba: remote code execution in printing subsystem via unescaped job descriptionCVE-2026-4480Public exploitFix availableEPSS 28.7%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 moreSamba: group policy certificate enrollment uses http:// without validationCVE-2026-3012Fix available8.0 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreSamba: vfs_worm does not block directory modificationCVE-2026-2340Fix available6.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileCVE-2026-9149Fix available6.5 Medium
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumsCVE-2026-9150Fix available6.5 Medium
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8632Fix available8.5 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionCVE-2026-8631Fix available9.3 Critical
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)CVE-2026-9064Fix available7.5 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151CVE-2026-8975Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-8947Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the Audio/Video: Web Codecs componentCVE-2026-8946Fix available7.5 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 morelibyang: lyb_read_string() integer overflow → heap buffer overflowCVE-2026-44673Fix available7.5 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePostgreSQL discloses MD5-hashed passwords via covert timing channelCVE-2026-6478Fix available6.5 Medium
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 morePostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryCVE-2026-6477Fix available8.8 High
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Fix available8.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- f5 nginx open source, nginx plus, dos +26 more +28 moreNGINX ngx_http_rewrite_module vulnerabilityCVE-2026-42945Public exploitFix availableEPSS 68.0%9.2 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Profile Backup componentCVE-2026-8401Fix available9.8 Critical
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 moreAn attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE...CVE-2026-42006Fix available4.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the JavaScript Engine componentCVE-2026-8391Fix available5.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT componentCVE-2026-8388Public exploitFix available6.5 Medium
- microsoft .net, .net 10.0, .net 8.0 +8 more +10 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-42899Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +11 more +13 moreCockpit: cockpit: arbitrary command execution via crafted links in system logs uiCVE-2026-4802Public exploitFix available8.0 High
- shlomif xml::libxml, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequencesCVE-2026-8177Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actionsCVE-2026-43329Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 moreQuadratic string concatenation in consumePhrase in net/mailCVE-2026-42499Fix available7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 moreQuadratic string concatentation in consumeComment in net/mailCVE-2026-39820Fix available7.5 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreOther issue in the WebRTC componentCVE-2026-8094Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2CVE-2026-8092Fix available8.1 High
- Show moreLoading…