Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-3633	Libsoup: libsoup: header and http request injection via crlf injection	3.9 Low	Mar 17, 2026
CVE-2026-3632	Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames	3.9 Low	Mar 17, 2026
CVE-2026-3441	Binutils: gnu binutils: information disclosure via specially crafted xcoff object file	6.1 Medium	Mar 15, 2026
CVE-2026-3442	Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker	6.1 Medium	Mar 15, 2026
CVE-2026-3084	GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2921	GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3083	GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3086	GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3085	GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability	8.8 High	Mar 13, 2026
CVE-2026-3082	GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-3081	GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2923	GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2922	GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-2920	GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability	7.8 High	Mar 13, 2026
CVE-2026-31806	FreeRDP is a free implementation of the Remote Desktop Protocol	9.3 Critical	Mar 13, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Medium	Mar 13, 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 High	Mar 12, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Low	Mar 12, 2026
CVE-2026-3099	Libsoup: libsoup: authentication bypass via digest authentication replay attack	5.8 Medium	Mar 12, 2026
CVE-2026-3234	Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection	4.3 Medium	Mar 12, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026

Other Red Hat products