Vulnérabilités de Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-23111	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check…	7.8 Élevée	13 févr. 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 Élevée	12 févr. 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 Élevée	12 févr. 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 Élevée	12 févr. 2026
CVE-2026-25506	MUNGE is an authentication service for creating and validating user credentials	7.7 Élevée	10 févr. 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 Élevée	10 févr. 2026
CVE-2025-35998	Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some…	7.9 Élevée	10 févr. 2026
CVE-2026-24678	FreeRDP is a free implementation of the Remote Desktop Protocol	8.7 Élevée	9 févr. 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Moyenne	9 févr. 2026
CVE-2026-1709	A flaw was found in Keylime	9.4 Critique	6 févr. 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 Élevée	5 févr. 2026
CVE-2026-1761	Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response	8.6 Élevée	2 févr. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 Élevée	28 janv. 2026
CVE-2026-24882	In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command…	8.4 Élevée	27 janv. 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Non notée	27 janv. 2026
CVE-2026-21721	The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:*…	8.1 Élevée	27 janv. 2026
CVE-2026-0994	A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the…	8.2 Élevée	23 janv. 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 Élevée	22 janv. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2026-21945	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…	7.5 Élevée	20 janv. 2026
CVE-2025-59465	A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an…	7.5 Élevée	20 janv. 2026
CVE-2025-55130	A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions…	7.1 Élevée	20 janv. 2026
CVE-2025-55131	A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using…	7.1 Élevée	20 janv. 2026
CVE-2026-23884	FreeRDP is a free implementation of the Remote Desktop Protocol	7.7 Élevée	19 janv. 2026

Autres produits Red Hat