Vulnérabilités connues pour Red Hat Enterprise Linux 10

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-8388	Incorrect boundary conditions in the JavaScript Engine: JIT component	6.5 Moyenne	12 mai 2026
CVE-2026-5172	A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read…	7.3 Élevée	11 mai 2026
CVE-2026-4892	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute…	8.4 Élevée	11 mai 2026
CVE-2026-4891	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a…	5.3 Moyenne	11 mai 2026
CVE-2026-4890	A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of…	7.5 Élevée	11 mai 2026
CVE-2026-4802	Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui	8.0 Élevée	11 mai 2026
CVE-2026-43500	In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged…	7.8 Élevée	11 mai 2026
CVE-2026-8177	XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing…	7.5 Élevée	10 mai 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Faible	10 mai 2026
CVE-2026-7263	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,…	6.3 Moyenne	10 mai 2026
CVE-2026-6104	In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is…	6.3 Moyenne	10 mai 2026
CVE-2026-6722	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP…	9.5 Critique	10 mai 2026
CVE-2026-7262	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP…	2.9 Faible	10 mai 2026
CVE-2025-14179	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO…	7.4 Élevée	10 mai 2026
CVE-2026-7568	In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()…	6.3 Moyenne	10 mai 2026
CVE-2026-42258	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	5.8 Moyenne	9 mai 2026
CVE-2026-42246	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	7.6 Élevée	9 mai 2026
CVE-2026-41163	bubblewrap is a low-level unprivileged sandboxing tool	8.7 Élevée	9 mai 2026
CVE-2026-43329	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum…	7.8 Élevée	8 mai 2026
CVE-2026-43284	In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb…	8.8 Élevée	8 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 Élevée	7 mai 2026

Autres produits Red Hat