Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 High	Feb 12, 2026
CVE-2026-1837	A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory	8.7 High	Feb 11, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2026-25506	MUNGE is an authentication service for creating and validating user credentials	7.7 High	Feb 10, 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 High	Feb 10, 2026
CVE-2025-35998	Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some…	7.9 High	Feb 10, 2026
CVE-2026-24678	FreeRDP is a free implementation of the Remote Desktop Protocol	8.7 High	Feb 9, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2026-1709	A flaw was found in Keylime	9.4 Critical	Feb 6, 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 High	Feb 5, 2026
CVE-2026-23074	In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as…	7.8 High	Feb 4, 2026
CVE-2026-1801	Libsoup: libsoup: http request smuggling via malformed chunk headers	5.3 Medium	Feb 3, 2026
CVE-2026-1760	Libsoup: soupserver: denial of service via http request smuggling	5.3 Medium	Feb 2, 2026
CVE-2026-1761	Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response	8.6 High	Feb 2, 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Medium	Feb 2, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 High	Jan 28, 2026
CVE-2026-1539	Libsoup: libsoup: credential leakage via http redirects	5.8 Medium	Jan 28, 2026
CVE-2026-1536	Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header	5.8 Medium	Jan 28, 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 High	Jan 28, 2026
CVE-2026-24882	In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command…	8.4 High	Jan 27, 2026
CVE-2026-24881	In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause…	8.1 High	Jan 27, 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Not rated	Jan 27, 2026
CVE-2026-24869	Use-after-free in the Layout: Scrolling and Overflow component	8.8 High	Jan 27, 2026

Other Red Hat products