Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 High	Mar 26, 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 High	Mar 25, 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 High	Mar 25, 2026
CVE-2026-3608	Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any…	7.5 High	Mar 25, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026
CVE-2026-4371	A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside…	7.4 High	Mar 24, 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Medium	Mar 24, 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 High	Mar 24, 2026
CVE-2026-27651	When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can…	7.5 High	Mar 24, 2026
CVE-2026-27654	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker…	8.2 High	Mar 24, 2026
CVE-2026-27784	The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might…	7.8 High	Mar 24, 2026
CVE-2026-32647	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…	7.8 High	Mar 24, 2026
CVE-2026-4721	Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and…	9.8 Critical	Mar 24, 2026
CVE-2026-4720	Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026
CVE-2026-4729	Memory safety bugs present in Firefox 148 and Thunderbird 148	9.8 Critical	Mar 24, 2026
CVE-2026-4699	Incorrect boundary conditions in the Layout: Text and Fonts component	7.5 High	Mar 24, 2026
CVE-2026-4700	Mitigation bypass in the Networking: HTTP component	9.8 Critical	Mar 24, 2026
CVE-2026-4697	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 High	Mar 24, 2026
CVE-2026-4698	JIT miscompilation in the JavaScript Engine: JIT component	8.8 High	Mar 24, 2026
CVE-2026-4695	Incorrect boundary conditions in the Audio/Video: Web Codecs component	7.5 High	Mar 24, 2026
CVE-2026-4696	Use-after-free in the Layout: Text and Fonts component	9.8 Critical	Mar 24, 2026
CVE-2026-4693	Incorrect boundary conditions in the Audio/Video: Playback component	7.5 High	Mar 24, 2026
CVE-2026-4694	Incorrect boundary conditions, integer overflow in the Graphics component	7.5 High	Mar 24, 2026
CVE-2026-4691	Use-after-free in the CSS Parsing and Computation component	9.8 Critical	Mar 24, 2026

Other Red Hat products