Vulnerabilities of Red Hat Red Hat Enterprise Linux 10
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-93009 | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93010 | A flaw was found in dnsmasq | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93006 | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-93007 | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93011 | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93008 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-85498 | A flaw was found in polkit | 3.5 Low | Oct 29, 2026 |
| CVE-2026-117548 | 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service | 6.5 Medium | Oct 29, 2026 |
| CVE-2026-109411 | Samba: access control bypass via vfs_ceph_rgw case-insensitive open | 8.1 High | Oct 28, 2026 |
| CVE-2026-116497 | Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon | 5.5 Medium | Oct 26, 2026 |
| CVE-2026-115486 | Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning | 7.1 High | Oct 23, 2026 |
| CVE-2026-115485 | Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio | 6.3 Medium | Oct 23, 2026 |
| CVE-2026-115484 | Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg | 7.6 High | Oct 23, 2026 |
| CVE-2026-115449 | A flaw was found in libslirp | 3.5 Low | Oct 22, 2026 |
| CVE-2026-115221 | Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership | 5.4 Medium | Oct 22, 2026 |
| CVE-2026-111079 | Goose: goose: shell history and environment leak via terminal integration | 7.4 High | Oct 22, 2026 |
| CVE-2026-115207 | Patch: filename validation bypass in reversal fallback allows file creation outside the working directory | 5.5 Medium | Oct 22, 2026 |
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-85518 | Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | 6.1 Medium | Oct 21, 2026 |
| CVE-2026-114236 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… | 3.3 Low | Oct 21, 2026 |
| CVE-2026-92824 | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92822 | Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92823 | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-114038 | Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string | 5.1 Medium | Oct 21, 2026 |
| CVE-2026-113496 | Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments | 5.0 Medium | Oct 20, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430