Vulnerabilities of Red Hat Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1709	A flaw was found in Keylime	9.4 Critical	Feb 6, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-0881	Sandbox escape in the Messaging System component	10.0 Critical	Jan 13, 2026
CVE-2026-0879	Sandbox escape due to incorrect boundary conditions in the Graphics component	9.8 Critical	Jan 13, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critical	Jan 7, 2026
CVE-2025-67268	gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file	9.8 Critical	Jan 2, 2026
CVE-2025-10230	Samba: command injection in wins server hook script	10.0 Critical	Nov 7, 2025
CVE-2025-7493	A privilege escalation flaw from host to domain administrator was found in FreeIPA	9.1 Critical	Sep 30, 2025
CVE-2025-4404	Freeipa: idm: privilege escalation from host to domain admin in freeipa	9.1 Critical	Jun 17, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critical	Apr 15, 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-3094	Xz: malicious code in distributed source	10.0 Critical	Mar 29, 2024
CVE-2006-4339	Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass	9.1 Critical	Sep 5, 2006

Other Red Hat products