Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 High	Apr 2, 2026
CVE-2026-34545	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.4 High	Apr 1, 2026
CVE-2026-35093	Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins	8.8 High	Apr 1, 2026
CVE-2026-35094	A flaw was found in libinput	3.3 Low	Apr 1, 2026
CVE-2026-35092	A flaw was found in Corosync	7.5 High	Apr 1, 2026
CVE-2026-35091	A flaw was found in Corosync	8.2 High	Apr 1, 2026
CVE-2026-23401	KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE	8.1 High	Apr 1, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026
CVE-2026-33986	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Medium	Mar 30, 2026
CVE-2026-21710	A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named…	7.5 High	Mar 30, 2026
CVE-2026-34714	Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default…	9.2 Critical	Mar 30, 2026
CVE-2026-5165	Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset	6.7 Medium	Mar 30, 2026
CVE-2026-5164	Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request	6.7 Medium	Mar 30, 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 High	Mar 30, 2026
CVE-2026-5119	Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment	5.9 Medium	Mar 30, 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 High	Mar 27, 2026
CVE-2026-33940	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-33896	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.4 High	Mar 27, 2026
CVE-2026-33895	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026

Other Red Hat products