Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2761	Sandbox escape in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2762	Integer overflow in the JavaScript: Standard Library component	9.8 Critical	Feb 24, 2026
CVE-2026-2760	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component	10.0 Critical	Feb 24, 2026
CVE-2026-2759	Incorrect boundary conditions in the Graphics: ImageLib component	9.8 Critical	Feb 24, 2026
CVE-2026-2758	Use-after-free in the JavaScript: GC component	9.8 Critical	Feb 24, 2026
CVE-2026-2757	Incorrect boundary conditions in the WebRTC: Audio/Video component	9.8 Critical	Feb 24, 2026
CVE-2026-27623	Valkey is a distributed key-value database	7.5 High	Feb 23, 2026
CVE-2026-21863	Valkey is a distributed key-value database	7.5 High	Feb 23, 2026
CVE-2025-67733	Valkey is a distributed key-value database	8.5 High	Feb 23, 2026
CVE-2025-14905	389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow	7.2 High	Feb 23, 2026
CVE-2026-2243	Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing	5.1 Medium	Feb 19, 2026
CVE-2026-0665	An off-by-one error was found in QEMU's KVM Xen guest support	6.5 Medium	Feb 18, 2026
CVE-2025-8860	A flaw was found in QEMU in the uefi-vars virtual device	3.3 Low	Feb 18, 2026
CVE-2025-14876	A flaw was found in the virtio-crypto device of QEMU	5.5 Medium	Feb 18, 2026
CVE-2025-1272	The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode…	7.7 High	Feb 18, 2026
CVE-2025-0577	An insufficient entropy vulnerability was found in glibc	4.8 Medium	Feb 18, 2026
CVE-2026-22860	Rack is a modular Ruby web server interface	7.5 High	Feb 18, 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Not rated	Feb 17, 2026
CVE-2026-2447	Heap buffer overflow in libvpx	8.8 High	Feb 16, 2026
CVE-2026-23185	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk…	7.8 High	Feb 14, 2026
CVE-2026-23111	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check…	7.8 High	Feb 13, 2026
CVE-2026-2443	Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure	5.3 Medium	Feb 13, 2026
CVE-2026-2007	Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string	8.2 High	Feb 12, 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 High	Feb 12, 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 High	Feb 12, 2026

Other Red Hat products