Red Hat Red Hat Enterprise Linux 10

• CVE-2026-113495 Medium 5.0 Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments 0.2%
• CVE-2026-112177 High 7.3 Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 0.4%
• CVE-2026-112261 High 7.8 Gimp: gimp: use-after-free in xcf loader via prop_selected_path 0.2%
• CVE-2026-112258 High 7.8 Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels 0.2%
• CVE-2026-112257 High 7.8 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033) 0.2%
• CVE-2026-112260 High 7.1 Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing 0.2%
• CVE-2026-112259 Medium 5.5 Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import 0.1%
• CVE-2026-112214 Medium 6.5 Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser 0.2%
• CVE-2026-112210 Medium 6.0 Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service 0.1%
• CVE-2026-16460 High 7.4 Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization <0.1%
• CVE-2026-89096 Medium 5.9 Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd 0.3%
• CVE-2026-89088 Medium 5.5 Parted: parted: denial of service via heap buffer overflow during fat16 resize 0.2%
• CVE-2026-89085 Medium 6.6 Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image 0.2%
• CVE-2026-111802 Medium 6.6 Nautilus: nautilus: arbitrary file deletion via trash symlink 0.2%
• CVE-2026-17591 Low 3.6 Libarchive: libarchive: use-after-free via aliased mac metadata copy 0.2%
• CVE-2026-62438 Medium 6.1 Gimp: gimp: paa integer overflow out-of-bounds read 0.1%
• CVE-2026-62439 High 7.0 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability 0.2%
• CVE-2026-85977 Medium 5.3 Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding 0.4%
• CVE-2026-85231 Medium 6.5 Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding 0.3%
• CVE-2026-89098 Medium 5.5 Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd 0.1%
• CVE-2026-111581 Low 3.3 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method 0.1%
• CVE-2026-111555 Medium 6.0 Luksmeta: missing slot-range validation permits out-of-gap device i/o 0.1%
• CVE-2026-104715 High 7.8 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass 0.3%
• CVE-2026-110777 Medium 5.7 Evolution-data-server: local file disclosure via attach file:// uris 0.4%
• CVE-2026-86849 Medium 6.5 Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto 0.1%
• CVE-2026-86856 Medium 6.5 Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver 0.2%
• CVE-2026-86847 Medium 6.5 Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup 0.2%
• CVE-2026-86846 Medium 6.5 Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto 0.2%
• CVE-2026-86845 Medium 6.5 Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup 0.2%
• CVE-2026-86566 Medium 6.5 Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) 0.2%
• CVE-2026-86848 High 8.8 Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto 0.1%
• CVE-2026-86567 High 8.8 Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap 0.2%
• CVE-2026-100236 High 8.6 Dpdk: dpdk: heap out-of-bounds read/write in gso header copy 0.4%
• CVE-2026-86565 High 8.2 Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write 0.2%
• CVE-2026-86563 High 7.8 Dpdk: dpdk: double offset bug in vhost log mapping calculation 0.2%
• CVE-2026-86562 High 7.8 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) 0.2%
• CVE-2026-86561 Medium 6.5 Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup 0.2%
• CVE-2026-93683 Medium 6.4 Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou 0.1%
• CVE-2026-109968 Medium 5.5 Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file <0.1%
• CVE-2026-100229 Medium 6.5 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check 0.3%
• CVE-2026-109971 Medium 4.7 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool 0.2%
• CVE-2026-109970 Medium 4.7 Clevis: clevis: pkcs#11 token pin written to world-readable file 0.1%
• CVE-2026-109969 Medium 4.7 Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask 0.1%
• CVE-2026-100231 Medium 6.1 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters 0.1%
• CVE-2026-86476 High 8.4 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize 0.2%
• CVE-2026-110036 Low 3.3 Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices 0.2%
• CVE-2026-105460 Medium 5.5 Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt() 0.1%
• CVE-2026-109976 Medium 4.7 Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection 0.1%
• CVE-2026-109833 Medium 5.9 Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service 0.4%
• CVE-2026-109832 High 7.5 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted) 0.4%