Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-59057	React Router is a router for React	7.6 High	Jan 10, 2026
CVE-2026-0719	Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication	8.6 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critical	Jan 7, 2026
CVE-2025-67269	An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to…	7.5 High	Jan 2, 2026
CVE-2025-67268	gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file	9.8 Critical	Jan 2, 2026
CVE-2025-14946	Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri	4.8 Medium	Dec 19, 2025
CVE-2025-14523	Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)	8.2 High	Dec 11, 2025
CVE-2025-14512	Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow	6.5 Medium	Dec 11, 2025
CVE-2025-14087	Glib: glib: buffer underflow in gvariant parser leads to heap corruption	5.6 Medium	Dec 10, 2025
CVE-2025-14104	Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames	6.1 Medium	Dec 5, 2025
CVE-2025-13601	Glib: integer overflow in in g_escape_uri_string()	7.7 High	Nov 26, 2025
CVE-2025-13609	A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent…	8.2 High	Nov 24, 2025
CVE-2025-54770	Grub2: use-after-free in net_set_vlan	4.9 Medium	Nov 18, 2025
CVE-2025-61664	Grub2: missing unregister call for normal_exit command may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61663	Grub2: missing unregister call for normal commands may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 High	Nov 18, 2025
CVE-2025-61661	Grub2: grub2: out-of-bounds write via malicious usb device	4.8 Medium	Nov 18, 2025
CVE-2025-54771	Grub2: use-after-free in grub_file_close()	4.9 Medium	Nov 18, 2025
CVE-2025-13193	Libvirt: information disclosure via world-readable vm snapshots	5.5 Medium	Nov 17, 2025
CVE-2025-59089	If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g	5.9 Medium	Nov 12, 2025
CVE-2025-59088	Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv	8.6 High	Nov 12, 2025
CVE-2025-12748	Libvirt: denial of service in xml parsing	5.5 Medium	Nov 11, 2025

Other Red Hat products