What’s Vulnerable › Products
Red Hat Enterprise Linux 10 vulnerabilities
531 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 448 published in the last 12 months.
Check whether your Red Hat Enterprise Linux 10 version is affected
Latest Red Hat Enterprise Linux 10 vulnerabilities
- CVE-2026-120194 — Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step (CVSS 7.5)
- CVE-2026-119842 — Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check (CVSS 6.5)
- CVE-2026-119727 — Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation (CVSS 6.5)
- CVE-2026-119729 — Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service (CVSS 6.5)
- CVE-2026-119728 — Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure (CVSS 5.5)
- CVE-2026-119777 — Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser (CVSS 7.8)
- CVE-2026-119528 — Gimp: gimp: stack buffer overflow in psd image resource header loader (CVSS 7.8)
- CVE-2026-115456 — Gcc: out-of-bounds read in std::from_chars (CVSS 3.7)
- CVE-2026-115455 — Gcc: stack overflow in std::bitset on libstdc++ (CVSS 6.5)
- CVE-2026-114691 — Gcc: integer wrap in `std (CVSS 5.9)
- CVE-2026-114690 — Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std (CVSS 6.2)
- CVE-2026-103963 — Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service (CVSS 7.5)
- CVE-2026-112922 — Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading (CVSS 3.3)
- CVE-2026-110133 — Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback (CVSS 5.8)
- CVE-2026-93009 — Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder (CVSS 4.3)
- CVE-2026-93010 — Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check (CVSS 4.3)
- CVE-2026-93006 — Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content (CVSS 6.8)
- CVE-2026-93007 — Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation (CVSS 5.3)
- CVE-2026-93011 — Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms (CVSS 5.3)
- CVE-2026-93008 — Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations (CVSS 6.8)
- CVE-2026-85498 — Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow (CVSS 3.5)
- CVE-2026-117548 — 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service (CVSS 6.5)
- CVE-2026-116497 — Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon (CVSS 5.5)
- CVE-2026-115486 — Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning (CVSS 7.1)
- CVE-2026-115485 — Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio (CVSS 6.3)