Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1489	Glib: glib: memory corruption via integer overflow in unicode case conversion	5.4 Medium	Jan 27, 2026
CVE-2026-1485	Glib: glib: local denial of service via buffer underflow in content type parsing	2.8 Low	Jan 27, 2026
CVE-2026-1484	Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()	4.2 Medium	Jan 27, 2026
CVE-2026-1467	Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured	5.8 Medium	Jan 27, 2026
CVE-2026-21721	The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:*…	8.1 High	Jan 27, 2026
CVE-2026-21720	Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image	7.5 High	Jan 27, 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Medium	Jan 26, 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Low	Jan 26, 2026
CVE-2026-0810	Gix-date: gix-date: undefined behavior due to invalid string generation	7.1 High	Jan 26, 2026
CVE-2025-11065	Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure	5.3 Medium	Jan 26, 2026
CVE-2026-0994	A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the…	8.2 High	Jan 23, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-13878	Malformed BRID/HHIT records can cause `named` to terminate unexpectedly	7.5 High	Jan 21, 2026
CVE-2026-0988	Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()	3.7 Low	Jan 21, 2026
CVE-2026-21945	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 High	Jan 20, 2026
CVE-2026-21932	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.4 High	Jan 20, 2026
CVE-2025-59465	A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an…	7.5 High	Jan 20, 2026
CVE-2025-55130	A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions…	7.1 High	Jan 20, 2026
CVE-2025-55131	A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using…	7.1 High	Jan 20, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-23884	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026
CVE-2026-23883	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 High	Jan 19, 2026

Other Red Hat products