Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()CVE-2026-43038Fix available9.8 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()CVE-2026-43037Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsaclCVE-2026-31709Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewriteback: Fix use after free in inode_switch_wbs_work_fn()CVE-2026-31703Fix available7.8 High
- frrouting, red hat enterprise linux 10, enterprise linux 8 +1 more +3 moreAn off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd...CVE-2026-37457Fix available7.5 High
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5403Fix available7.8 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkCVE-2026-5656Fix available7.0 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5405Fix available7.8 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage componentCVE-2025-14576Fix available7.4 High
- bytecodealliance wasmtime, red hat enterprise linux 10, hardened images +2 moreWasmtime: Panic when allocating a table exceeding the size of the host's address spaceCVE-2026-44216Fix available5.9 Medium
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5402Fix available8.8 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +14 more +16 moreGnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalCVE-2026-5419Fix available3.7 Low
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: information disclosure via heap overread in rsa key exchangeCVE-2026-5260Fix available8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlingCVE-2026-42015Fix available5.3 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinCVE-2026-42014Fix available6.6 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: certificate validation bypass due to oversized subject alternative nameCVE-2026-42013Fix available8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +24 more +26 moreGnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansCVE-2026-42012Fix available7.1 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCVE-2026-42009Fix available7.5 High
- pgjdbc, postgresql jdbc driver, red hat amq broker 7.13.6 +17 more +19 morepgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoSCVE-2026-42198Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit is vulnerable to directory traversalCVE-2026-38993Fix available6.5 Medium
- libsndfile project libsndfile, red hat ai inference server 3.3, enterprise linux 10 +14 more +16 moreAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was...CVE-2026-37555Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.1CVE-2026-73247.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7323Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7322Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreInformation disclosure due to incorrect boundary conditions in the Audio/Video componentCVE-2026-7320Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morexfrm: hold dev ref until after transport_finish NF_HOOKCVE-2026-31663Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morerxrpc: Fix RxGK token loading to check boundsCVE-2026-31641Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()CVE-2026-31617Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreusbip: validate number_of_packets in usbip_pack_ret_submit()CVE-2026-31607Fix available9.8 Critical
- grafana tempo, enterprise traces (get), red hat logging subsystem for red hat openshift +13 more +15 moreTempo query limit results in unbounded memory allocationCVE-2026-21728Fix available7.5 High
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- ruby erb, red hat enterprise linux 10, enterprise linux 10.0 extended update support +10 more +12 moreERB has an @_init deserialization guard bypass via def_module / def_method / def_classCVE-2026-41316Fix available8.1 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredrm/amd/display: Do not skip unrelated mode changes in DSC validationCVE-2026-31488Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morecan: isotp: fix tx.buf use-after-free in isotp_sendmsg()CVE-2026-31474Fix available7.8 High
- ubuntu libefiboot, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreEfivar: efivar: denial of service due to stack overflow in device path node parsingCVE-2026-6862Fix available5.5 Medium
- gnu emacs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEmacs: emacs: memory corruption vulnerability when processing svg cssCVE-2026-6861Fix available6.1 Medium
- packagekit, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootCVE-2026-41651Public exploitFix available8.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: binutils: arbitrary code execution via malformed xcoff object file processingCVE-2026-6846Fix available7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesCVE-2026-6844Fix available5.5 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreNano: nano: format string vulnerability leads to denial of serviceCVE-2026-6843Fix available5.5 Medium
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf fileCVE-2026-6845Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissionsCVE-2026-6842Fix available2.5 Low
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- oracle graalvm, graalvm for jdk, jdk +31 more +33 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-34282Fix available7.5 High
- oracle graalvm, graalvm for jdk, jdk +33 more +35 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-22016Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibxpm: libxpm: denial of service via out-of-bounds read in xpm file parsingCVE-2026-4367Fix available5.5 Medium
- Show moreLoading…