Vulnérabilités connues pour Red Hat Enterprise Linux 10

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-93433	Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing	5.5 Moyenne	21 sept. 2026
CVE-2026-92382	Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write	4.1 Moyenne	21 sept. 2026
CVE-2026-94184	Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)	5.3 Moyenne	21 sept. 2026
CVE-2026-80110	Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint	8.1 Élevée	21 sept. 2026
CVE-2026-91202	Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste	6.1 Moyenne	18 sept. 2026
CVE-2026-91203	Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition	6.0 Moyenne	18 sept. 2026
CVE-2026-91205	Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race	6.0 Moyenne	18 sept. 2026
CVE-2026-92768	A flaw was found in cockpit-machines	5.5 Moyenne	18 sept. 2026
CVE-2026-92747	A flaw was found in `cockpit-machines`	5.0 Moyenne	18 sept. 2026
CVE-2026-92745	A flaw was found in cockpit-machines	5.0 Moyenne	18 sept. 2026
CVE-2026-91142	Cockpit: cockpit: unauthorized modification of login records via integer overflow	3.6 Faible	18 sept. 2026
CVE-2026-91147	Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash	5.9 Moyenne	18 sept. 2026
CVE-2026-91149	Cockpit: cockpit: denial of service via unbounded connection thread spawning	7.5 Élevée	18 sept. 2026
CVE-2026-75883	Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.	6.8 Moyenne	18 sept. 2026
CVE-2026-93676	xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member…	3.2 Faible	18 sept. 2026
CVE-2026-93653	Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)	5.5 Moyenne	18 sept. 2026
CVE-2026-81627	Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram	8.2 Élevée	18 sept. 2026
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 Élevée	18 sept. 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 Élevée	18 sept. 2026
CVE-2026-76781	Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute	5.5 Moyenne	17 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-86320	A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true	7.8 Élevée	17 sept. 2026
CVE-2026-42784	Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion	7.4 Élevée	16 sept. 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Moyenne	16 sept. 2026
CVE-2025-11395	Podman: arbitrary file write when importing oci archive	5.5 Moyenne	15 sept. 2026

Autres produits Red Hat