Red Hat Red Hat Enterprise Linux 10

• CVE-2026-28296 Medium 4.3 Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths 0.4%
• CVE-2026-26104 Medium 5.5 Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api <0.1%
• CVE-2026-26103 High 7.1 Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api <0.1%
• CVE-2025-14905 High 7.2 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow 1.3%
• CVE-2026-2243 Medium 5.1 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 0.1%
• CVE-2026-0665 Medium 6.5 Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq 0.2%
• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-14876 Medium 5.5 Qemu-kvm: unbounded allocation in virtio-crypto 0.2%
• CVE-2025-1272 High 7.7 Kernel: secure boot does not automatically enable kernel lockdown 0.3%
• CVE-2025-0577 Medium 4.8 Glibc: vdso getrandom acceleration may return predictable randomness 0.2%
• CVE-2026-2443 Medium 5.3 Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 0.5%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1709 Critical 9.4 Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 5.7%
• CVE-2026-1801 Medium 5.3 Libsoup: libsoup: http request smuggling via malformed chunk headers 0.4%
• CVE-2026-1760 Medium 5.3 Libsoup: soupserver: denial of service via http request smuggling 0.5%
• CVE-2026-1761 High 8.6 Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 1.1%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%
• CVE-2026-1539 Medium 5.8 Libsoup: libsoup: credential leakage via http redirects 0.3%
• CVE-2026-1536 Medium 5.8 Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header 0.3%
• CVE-2026-1489 Medium 5.4 Glib: glib: memory corruption via integer overflow in unicode case conversion 0.4%
• CVE-2026-1485 Low 2.8 Glib: glib: local denial of service via buffer underflow in content type parsing 0.2%
• CVE-2026-1484 Medium 4.2 Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode() 0.3%
• CVE-2026-1467 Medium 5.8 Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 0.4%
• CVE-2025-9820 Medium 4.0 Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function 0.2%
• CVE-2025-9615 Low 3.3 Networkmanager: networkmanager file access 0.2%
• CVE-2026-0810 High 7.1 Gix-date: gix-date: undefined behavior due to invalid string generation 0.2%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2026-0988 Low 3.7 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() 0.4%
• CVE-2026-0992 Low 2.9 Libxml2: libxml2: denial of service via crafted xml catalogs 0.5%
• CVE-2026-0989 Low 3.7 Libxml2: unbounded relaxng include recursion leading to stack overflow 0.5%
• CVE-2026-0990 Medium 5.9 Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing 1.0%
• CVE-2025-14242 Medium 6.5 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing 0.8%
• CVE-2026-0716 Medium 4.8 Libsoup: out-of-bounds read in libsoup websocket frame processing 0.4%
• CVE-2026-0719 High 8.6 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 0.6%
• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2025-14946 Medium 4.8 Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri 0.1%
• CVE-2025-14523 High 8.2 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 0.5%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-14104 Medium 6.1 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 0.2%
• CVE-2025-13601 High 7.7 Glib: integer overflow in in g_escape_uri_string() 0.3%
• CVE-2025-13609 High 8.2 Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 0.5%
• CVE-2025-54770 Medium 4.9 Grub2: use-after-free in net_set_vlan 0.2%
• CVE-2025-61664 Medium 4.9 Grub2: missing unregister call for normal_exit command may lead to use-after-free 0.1%
• CVE-2025-61663 Medium 4.9 Grub2: missing unregister call for normal commands may lead to use-after-free 0.1%
• CVE-2025-61662 High 7.8 Grub2: missing unregister call for gettext command may lead to use-after-free 0.2%
• CVE-2025-61661 Medium 4.8 Grub2: grub2: out-of-bounds write via malicious usb device 0.2%
• CVE-2025-54771 Medium 4.9 Grub2: use-after-free in grub_file_close() 0.2%
• CVE-2025-13193 Medium 5.5 Libvirt: information disclosure via world-readable vm snapshots 0.1%
• CVE-2025-59089 Medium 5.9 Python-kdcproxy: remote dos via unbounded tcp upstream buffering 0.6%