Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 filesCVE-2026-1765Fix available5.6 Medium
- gnome localsearch, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreLocalsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 filesCVE-2026-1764Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupserver: denial of service via http request smugglingCVE-2026-1760Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responseCVE-2026-1761Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibxml2: memory leak leading to local denial of service in xmllint interactive shellCVE-2026-1757Fix available6.2 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service via connection exhaustion in applications using Cache ComponentsCVE-2026-44579Public exploitFix available7.5 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Server-side request forgery in applications using WebSocket upgradesCVE-2026-44578Public exploitFix availableEPSS 35.5%8.6 High
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Denial of Service in the Image Optimization APICVE-2026-44577Fix available5.9 Medium
- vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreNext.js: Middleware / Proxy bypass in Pages Router applications using i18nCVE-2026-44573Fix available7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: credential leakage via http redirectsCVE-2026-1539Fix available5.8 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition headerCVE-2026-1536Fix available5.8 Medium
- isaacs node-tar, tar, red hat cryostat 4 +27 more +29 morenode-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path TraversalCVE-2026-24842Fix available8.2 High
- gnupg, gpg4win, red hat enterprise linux 10 +5 more +7 moreIn GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the...CVE-2026-24882Fix available8.4 High
- gnupg, gpg4win, red hat enterprise linux 10 +4 more +6 moreIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized...CVE-2026-24881Fix available8.1 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the Layout: Scrolling and Overflow componentCVE-2026-248698.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: memory corruption via integer overflow in unicode case conversionCVE-2026-1489Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGlib: glib: local denial of service via buffer underflow in content type parsingCVE-2026-1485Fix available2.8 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()CVE-2026-1484Fix available4.2 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection via specially crafted urls when an http proxy is configuredCVE-2026-1467Fix available5.8 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege EscalationCVE-2026-21721Public exploitFix available8.1 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time outCVE-2026-21720Fix available7.5 High
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python ProtobufCVE-2026-0994Public exploitFix available8.2 High
- cli, red hat confidential compute attestation, cryostat 4 +32 more +34 morenpm cli Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCVE-2026-0775Fix available7.0 High
- pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 morewheel Allows Arbitrary File Permission Modification via Path TraversalCVE-2026-24049Public exploitFix available7.1 High
- lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsCVE-2025-13465Public exploitFix available6.9 Medium
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedlyCVE-2025-13878Fix available7.5 High
- oracle graalvm, graalvm for jdk, jdk +32 more +34 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-21945Fix available7.5 High
- oracle graalvm, graalvm for jdk, jdk +19 more +21 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-21932Fix available7.4 High
- isaacs node-tar, tar, red hat confidential compute attestation +37 more +39 morenode-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFSCVE-2026-23950Fix available8.8 High
- dabeaz ply, red hat fence agents remediation operator, migration toolkit for containers +25 more +27 moreAn undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code...CVE-2025-56005Public exploitFix availableDisputedEPSS 18.8%9.8 Critical
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreHeap-use-after-free in gdi_set_boundsCVE-2026-23884Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreHeap-use-after-free in update_pointer_newCVE-2026-23883Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +6 more +8 moreFreeRDP has heap-buffer-overflow in clear_decompress_bands_dataCVE-2026-23534Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in clear_decompress_residual_dataCVE-2026-23533Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in gdi_SurfaceToSurfaceCVE-2026-23532Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in clear_decompressCVE-2026-23531Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has heap-buffer-overflow in planar_decompress_plane_rleCVE-2026-23530Fix available7.7 High
- nodejs node, node.js, red hat enterprise linux 10 +6 more +8 moreA malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to...CVE-2025-59465Fix available7.5 High
- nodejs node, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...CVE-2025-55131Fix available7.1 High
- nodejs node, node.js, red hat enterprise linux 10 +6 more +8 moreA flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow...CVE-2025-55130Public exploitFix available7.1 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731Fix available7.8 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()CVE-2026-0988Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a heap-buffer-overflow in urb_select_configurationCVE-2026-22859Fix available5.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a global-buffer-overflow in crypto_base64_decodeCVE-2026-22858Fix available5.6 Medium
- Show moreLoading…