Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreFreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_callCVE-2026-22855Fix available5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreFreeRDP has a heap-buffer-overflow in ndr_read_uint8ArrayCVE-2026-22853Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: heap off-by-one in kvm xen physdevop_map_pirqCVE-2026-0665Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreVsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsingCVE-2025-14242Fix available6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSandbox escape in the Messaging System componentCVE-2026-088110.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147CVE-2026-0891Fix available8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the IPC componentCVE-2026-0882Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics componentCVE-2026-0880Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics componentCVE-2026-0879Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentCVE-2026-0878Fix available8.0 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security componentCVE-2026-0877Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: out-of-bounds read in libsoup websocket frame processingCVE-2026-0716Fix available4.8 Medium
- @tanstack react-router, remix-run @remix-run/router, red hat cryostat 4 +74 more +76 moreReact Router vulnerable to XSS via Open RedirectsCVE-2026-22029Fix available8.0 High
- @tanstack react-router, red hat ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +6 more +8 moreReact Router SSR XSS in ScrollRestorationCVE-2026-21884Fix available8.2 High
- @tanstack react-router, red hat cryostat 4, gatekeeper 3 +47 more +49 moreReact Router has Path Traversal in File Session StorageCVE-2025-61686Public exploitFix availableEPSS 17.3%9.1 Critical
- @tanstack react-router, red hat ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +6 more +8 moreReact Router has XSS VulnerabilityCVE-2025-59057Public exploitFix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationCVE-2026-0719Fix available8.6 High
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CVE-2026-22184Fix availableDisputed4.6 Medium
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 moreUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrfCVE-2025-12543Fix available9.6 Critical
- gpsd project gpsd, red hat enterprise linux 10, enterprise linux 9 +2 moreAn integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of...CVE-2025-67269Fix available7.5 High
- gpsd project gpsd, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moregpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers...CVE-2025-67268Fix available9.8 Critical
- gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 moreGix-date: gix-date: undefined behavior due to invalid string generationCVE-2026-0810Fix available7.1 High
- red hat libnbd, enterprise linux 10, enterprise linux 8 +2 more +4 moreLibnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uriCVE-2025-14946Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: unbounded allocation in virtio-cryptoCVE-2025-14876Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNetworkmanager: networkmanager file accessCVE-2025-9615Fix available3.3 Low
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreLibsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)CVE-2025-14523Fix available8.2 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- util-linux, red hat cert manager support for red hat openshift release 1.18, ceph storage 7 +11 more +13 moreUtil-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernamesCVE-2025-14104Fix available6.1 Medium
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- red hat cert manager support for red hat openshift release 1.18, ceph storage 8, discovery 2 +11 more +13 moreGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionCVE-2025-9820Fix available4.0 Medium
- keylime project keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreKeylime: keylime: registrar allows identity takeover via duplicate uuid registrationCVE-2025-13609Fix available8.2 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlanCVE-2025-54770Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb deviceCVE-2025-61661Fix available4.8 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()CVE-2025-54771Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: information disclosure via world-readable vm snapshotsCVE-2025-13193Fix available5.5 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: remote dos via unbounded tcp upstream bufferingCVE-2025-590895.9 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvCVE-2025-590888.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: denial of service in xml parsingCVE-2025-12748Public exploitFix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeCVE-2025-12464Fix available6.2 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removalCVE-2025-62230Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creationCVE-2025-62229Fix available7.3 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreLibsoup: heap use-after-free in libsoup message queue handling during http/2 read completionCVE-2025-12105Fix available7.5 High
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmetaCVE-2025-11568Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possibleCVE-2025-9640Fix available4.3 Medium
- Show moreLoading…