Vulnerabilities of Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026
CVE-2026-12296	Sandbox escape in the Security: Process Sandboxing component	9.6 Critical	Jun 16, 2026
CVE-2026-12295	Sandbox escape in the DOM: Navigation component	9.6 Critical	Jun 16, 2026
CVE-2026-12294	Sandbox escape in the DOM: Workers component	9.6 Critical	Jun 16, 2026
CVE-2026-12292	Incorrect boundary conditions in the Web Audio component	8.1 High	Jun 16, 2026
CVE-2026-12291	Use-after-free in the Networking: HTTP component	8.8 High	Jun 16, 2026
CVE-2026-12290	Memory safety bug fixed in Thunderbird 152	8.1 High	Jun 16, 2026
CVE-2026-12289	Privilege escalation in the Graphics: WebRender component	8.8 High	Jun 16, 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026
CVE-2026-52718	Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion	6.5 Medium	Jun 15, 2026
CVE-2026-52722	Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling	7.1 High	Jun 15, 2026
CVE-2026-52720	Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb	8.8 High	Jun 15, 2026
CVE-2026-53704	Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser	7.1 High	Jun 15, 2026
CVE-2026-53703	Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser	7.1 High	Jun 15, 2026
CVE-2026-53705	A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good	7.6 High	Jun 15, 2026
CVE-2026-52719	Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder	7.1 High	Jun 15, 2026
CVE-2026-48163	MariaDB server is a community developed fork of MySQL server	8.0 High	Jun 12, 2026
CVE-2026-44172	MariaDB server is a community developed fork of MySQL server	6.9 Medium	Jun 12, 2026
CVE-2026-44170	MariaDB server is a community developed fork of MySQL server	6.3 Medium	Jun 12, 2026
CVE-2026-47162	Vim is an open source, command line text editor	7.3 High	Jun 11, 2026
CVE-2026-11774	389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow	7.6 High	Jun 11, 2026
CVE-2026-49261	MariaDB server is a community developed fork of MySQL server	10.0 Critical	Jun 11, 2026
CVE-2026-6893	A flaw was found in dracut	7.5 High	Jun 10, 2026
CVE-2026-11837	Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown	7.3 High	Jun 10, 2026

Other Red Hat products