Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-11788	389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser	5.9 Medium	Jun 9, 2026
CVE-2026-11785	389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler	4.3 Medium	Jun 9, 2026
CVE-2026-11786	389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()	1.9 Low	Jun 9, 2026
CVE-2026-46323	In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()…	7.8 High	Jun 9, 2026
CVE-2026-46316	In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache…	9.3 Critical	Jun 9, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-9698	DBI versions before 1.648 for Perl saved errors in a limited-sized buffer	7.5 High	Jun 9, 2026
CVE-2026-11611	389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions	6.5 Medium	Jun 8, 2026
CVE-2026-46309	drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise	7.0 High	Jun 8, 2026
CVE-2026-49975	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…	Not rated	Jun 8, 2026
CVE-2026-42536	Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content…	Not rated	Jun 8, 2026
CVE-2026-44185	Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server…	Not rated	Jun 8, 2026
CVE-2026-34355	A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend	Not rated	Jun 8, 2026
CVE-2026-3238	A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller	7.5 High	Jun 8, 2026
CVE-2026-50263	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()	5.5 Medium	Jun 5, 2026
CVE-2026-50262	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes	5.5 Medium	Jun 5, 2026
CVE-2026-50264	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat	7.8 High	Jun 5, 2026
CVE-2026-50261	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()	7.8 High	Jun 5, 2026
CVE-2026-50260	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()	7.8 High	Jun 5, 2026
CVE-2026-50258	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels	7.8 High	Jun 5, 2026
CVE-2026-50259	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing	7.8 High	Jun 5, 2026
CVE-2026-50256	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch	7.8 High	Jun 5, 2026
CVE-2026-50257	Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()	7.8 High	Jun 5, 2026
CVE-2026-50265	A flaw was found in libinput	7.0 High	Jun 5, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026

Other Red Hat products