Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44673	libyang is a YANG data modeling language library	7.5 High	May 14, 2026
CVE-2026-44216	Wasmtime is a runtime for WebAssembly	5.9 Medium	May 14, 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Medium	May 14, 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 High	May 14, 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 High	May 14, 2026
CVE-2026-45109	Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes	7.5 High	May 13, 2026
CVE-2026-44579	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44578	Next.js is a React framework for building full-stack web applications	8.6 High	May 13, 2026
CVE-2026-44577	Next.js is a React framework for building full-stack web applications	5.9 Medium	May 13, 2026
CVE-2026-44574	Next.js is a React framework for building full-stack web applications	8.1 High	May 13, 2026
CVE-2026-44575	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44573	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 High	May 13, 2026
CVE-2026-42945	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42899	Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service…	7.5 High	May 12, 2026
CVE-2026-35433	Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally	7.3 High	May 12, 2026
CVE-2026-32177	Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally	7.3 High	May 12, 2026
CVE-2026-8401	Sandbox escape in the Profile Backup component	9.8 Critical	May 12, 2026
CVE-2026-42006	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP	4.3 Medium	May 12, 2026
CVE-2026-27851	When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted…	7.4 High	May 12, 2026
CVE-2026-8391	Other issue in the JavaScript Engine component	5.3 Medium	May 12, 2026
CVE-2026-8390	Use-after-free in the JavaScript: WebAssembly component	7.3 High	May 12, 2026
CVE-2026-8389	JIT miscompilation in the JavaScript Engine: JIT component	8.8 High	May 12, 2026

Other Red Hat products