Vulnerabilities of Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-102560 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102559 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | 8.6 High | Sep 29, 2026 |
| CVE-2026-102558 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102555 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding | 8.2 High | Sep 29, 2026 |
| CVE-2026-102557 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | 8.6 High | Sep 29, 2026 |
| CVE-2026-102556 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | 8.6 High | Sep 29, 2026 |
| CVE-2026-97024 | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc | 7.1 High | Sep 29, 2026 |
| CVE-2026-97023 | Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin | 7.1 High | Sep 28, 2026 |
| CVE-2026-96280 | The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize… | 7.5 High | Sep 27, 2026 |
| CVE-2026-96889 | Librsvg: use-after-free when xml includes have duplicated entities | 7.8 High | Sep 23, 2026 |
| CVE-2026-96275 | Flatpak: flatpak: arbitrary write access as root via extra-data extraction | 8.8 High | Sep 23, 2026 |
| CVE-2026-96512 | A flaw was found in sudo | 7.8 High | Sep 23, 2026 |
| CVE-2026-80110 | Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint | 8.1 High | Sep 21, 2026 |
| CVE-2026-89059 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | 7.5 High | Sep 18, 2026 |
| CVE-2026-86320 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true | 7.8 High | Sep 17, 2026 |
| CVE-2026-88924 | Gvfs: gvfs-admin socket ownership race permits local root | 7.0 High | Sep 10, 2026 |
| CVE-2026-18147 | Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url | 8.1 High | Sep 9, 2026 |
| CVE-2026-87766 | A flaw was found in bubblewrap | 8.8 High | Sep 9, 2026 |
| CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 High | Sep 8, 2026 |
| CVE-2026-76561 | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) | 7.2 High | Sep 8, 2026 |
| CVE-2026-18922 | A flaw was found in 389 Directory Server | 9.8 Critical | Sep 7, 2026 |
| CVE-2026-18453 | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | 7.5 High | Sep 7, 2026 |
| CVE-2026-18355 | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() | 7.5 High | Sep 7, 2026 |
| CVE-2026-76560 | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn | 7.5 High | Sep 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 503
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 450
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430