Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6845	Binutils: binutils: denial of service via crafted elf file	5.0 Medium	Apr 22, 2026
CVE-2026-6842	Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions	2.5 Low	Apr 22, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2026-34282	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-22016	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Apr 21, 2026
CVE-2026-40372	Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges…	9.1 Critical	Apr 21, 2026
CVE-2026-6786	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6784	Memory safety bugs present in Firefox 149 and Thunderbird 149	7.5 High	Apr 21, 2026
CVE-2026-6785	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and…	7.5 High	Apr 21, 2026
CVE-2026-6754	Use-after-free in the JavaScript Engine component	7.5 High	Apr 21, 2026
CVE-2026-6752	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6753	Incorrect boundary conditions in the WebRTC component	7.3 High	Apr 21, 2026
CVE-2026-6751	Uninitialized memory in the Audio/Video: Web Codecs component	7.3 High	Apr 21, 2026
CVE-2026-6750	Privilege escalation in the Graphics: WebRender component	8.8 High	Apr 21, 2026
CVE-2026-6749	Information disclosure due to uninitialized memory in the Graphics: Canvas2D component	7.5 High	Apr 21, 2026
CVE-2026-6747	Use-after-free in the WebRTC component	7.5 High	Apr 21, 2026
CVE-2026-6748	Uninitialized memory in the Audio/Video: Web Codecs component	9.8 Critical	Apr 21, 2026
CVE-2026-6746	Use-after-free in the DOM: Core & HTML component	7.5 High	Apr 21, 2026
CVE-2026-40244	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Apr 21, 2026
CVE-2026-6654	Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate	5.1 Medium	Apr 20, 2026
CVE-2026-6507	Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing	7.5 High	Apr 17, 2026
CVE-2026-40170	ngtcp2 is a C implementation of the IETF QUIC protocol	7.5 High	Apr 16, 2026
CVE-2025-54502	Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker…	7.1 High	Apr 16, 2026
CVE-2026-41082	In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory	7.3 High	Apr 16, 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 High	Apr 16, 2026

Other Red Hat products