Vulnérabilités connues pour Red Hat Enterprise Linux 10

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-86564	Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler	3.3 Faible	8 sept. 2026
CVE-2026-18090	Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block	6.1 Moyenne	8 sept. 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 Élevée	8 sept. 2026
CVE-2026-76561	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	7.2 Élevée	8 sept. 2026
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Moyenne	7 sept. 2026
CVE-2026-19843	389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor	8.4 Élevée	7 sept. 2026
CVE-2026-18922	A flaw was found in 389 Directory Server	9.8 Critique	7 sept. 2026
CVE-2026-18453	389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search	7.5 Élevée	7 sept. 2026
CVE-2026-18355	389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()	7.5 Élevée	7 sept. 2026
CVE-2026-76560	389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn	7.5 Élevée	7 sept. 2026
CVE-2026-79678	Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service	8.1 Élevée	7 sept. 2026
CVE-2026-76578	Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci	9.8 Critique	7 sept. 2026
CVE-2026-76925	Flatpak: flatpak: toctou race condition allows symlink redirection	5.8 Moyenne	4 sept. 2026
CVE-2026-85769	Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize	6.5 Moyenne	4 sept. 2026
CVE-2026-85534	Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read	5.9 Moyenne	4 sept. 2026
CVE-2026-81666	Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems	6.5 Moyenne	4 sept. 2026
CVE-2026-81665	A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly	7.5 Élevée	4 sept. 2026
CVE-2026-85197	Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload	7.6 Élevée	4 sept. 2026
CVE-2026-84185	Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	5.9 Moyenne	3 sept. 2026
CVE-2026-85150	Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header	7.5 Élevée	3 sept. 2026
CVE-2026-84838	Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()	7.8 Élevée	2 sept. 2026
CVE-2026-84837	Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	7.8 Élevée	2 sept. 2026
CVE-2026-78409	Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	7.0 Élevée	2 sept. 2026
CVE-2026-78410	Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	7.8 Élevée	2 sept. 2026
CVE-2026-78408	Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	7.9 Élevée	2 sept. 2026

Autres produits Red Hat