Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026
CVE-2026-56209	Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack	7.1 High	Jun 19, 2026
CVE-2026-3195	A flaw was found in QEMU	7.4 High	Jun 19, 2026
CVE-2026-3196	An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest	5.5 Medium	Jun 19, 2026
CVE-2026-52910	In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace…	7.8 High	Jun 19, 2026
CVE-2026-45696	OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…	8.3 High	Jun 18, 2026
CVE-2026-11791	389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()	5.0 Medium	Jun 18, 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 High	Jun 18, 2026
CVE-2026-9697	Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or…	7.4 High	Jun 17, 2026
CVE-2026-6734	Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying…	7.5 High	Jun 17, 2026
CVE-2026-12151	Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but…	7.5 High	Jun 17, 2026
CVE-2026-12528	389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()	5.4 Medium	Jun 17, 2026
CVE-2026-42055	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules	8.1 High	Jun 17, 2026
CVE-2026-42530	NGINX Open Source has a vulnerability in the ngx_http_v3_module module	8.1 High	Jun 17, 2026
CVE-2026-2604	Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling	5.6 Medium	Jun 16, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-4367	Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing	5.5 Medium	Jun 16, 2026
CVE-2026-10649	Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression	8.6 High	Jun 16, 2026
CVE-2026-12329	Memory safety bug fixed in Thunderbird ESR 140.12	5.3 Medium	Jun 16, 2026
CVE-2026-12328	Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…	8.1 High	Jun 16, 2026
CVE-2026-12326	Memory safety bugs present in Firefox 151 and Thunderbird 151	8.1 High	Jun 16, 2026
CVE-2026-12299	JIT miscompilation in the DOM: Core & HTML component	5.4 Medium	Jun 16, 2026
CVE-2026-12298	Memory safety bug fixed in Thunderbird 152	5.4 Medium	Jun 16, 2026
CVE-2026-12297	Sandbox escape due to incorrect boundary conditions in the Networking component	9.6 Critical	Jun 16, 2026

Other Red Hat products