Vulnerabilities of Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-102560 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102559 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | 8.6 High | Sep 29, 2026 |
| CVE-2026-102558 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | 8.6 High | Sep 29, 2026 |
| CVE-2026-102555 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding | 8.2 High | Sep 29, 2026 |
| CVE-2026-102557 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | 8.6 High | Sep 29, 2026 |
| CVE-2026-102556 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | 8.6 High | Sep 29, 2026 |
| CVE-2026-97024 | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc | 7.1 High | Sep 29, 2026 |
| CVE-2026-97023 | Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin | 7.1 High | Sep 28, 2026 |
| CVE-2026-96280 | Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems | 7.5 High | Sep 27, 2026 |
| CVE-2026-96889 | Librsvg: use-after-free when xml includes have duplicated entities | 7.8 High | Sep 23, 2026 |
| CVE-2026-96275 | Flatpak: flatpak: arbitrary write access as root via extra-data extraction | 8.8 High | Sep 23, 2026 |
| CVE-2026-96512 | A flaw was found in sudo | 7.8 High | Sep 23, 2026 |
| CVE-2026-80110 | Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint | 8.1 High | Sep 21, 2026 |
| CVE-2026-89058 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | 7.4 High | Sep 18, 2026 |
| CVE-2026-89059 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | 7.5 High | Sep 18, 2026 |
| CVE-2026-86320 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true | 7.8 High | Sep 17, 2026 |
| CVE-2026-88924 | Gvfs: gvfs-admin socket ownership race permits local root | 7.0 High | Sep 10, 2026 |
| CVE-2026-18147 | Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url | 8.1 High | Sep 9, 2026 |
| CVE-2026-87766 | A flaw was found in bubblewrap | 8.8 High | Sep 9, 2026 |
| CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 High | Sep 8, 2026 |
| CVE-2026-76561 | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) | 7.2 High | Sep 8, 2026 |
| CVE-2026-18922 | A flaw was found in 389 Directory Server | 9.8 Critical | Sep 7, 2026 |
| CVE-2026-18453 | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | 7.5 High | Sep 7, 2026 |
| CVE-2026-18355 | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() | 7.5 High | Sep 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430