Red Hat Red Hat Enterprise Linux 10

• CVE-2026-19879 Medium 5.3 Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 0.4%
• CVE-2026-58224 Medium 6.5 Samba: ctdb fails to do integrity checking of received packets 0.3%
• CVE-2026-19617 Medium 5.5 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser 0.2%
• CVE-2026-19730 Medium 4.2 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives 0.1%
• CVE-2026-73584 Medium 6.3 Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling 0.1%
• CVE-2026-73583 Medium 6.6 Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr 0.1%
• CVE-2026-73585 Medium 6.3 Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack 0.1%
• CVE-2026-18728 Medium 6.5 Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing 0.3%
• CVE-2026-18727 Medium 6.5 Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing 0.3%
• CVE-2026-18726 Medium 6.5 Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing 0.3%
• CVE-2026-19654 High 7.5 Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd 0.8%
• CVE-2026-73433 Medium 6.6 Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write 0.1%
• CVE-2026-73434 Medium 6.1 Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing 0.1%
• CVE-2026-19548 Medium 5.5 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing 0.2%
• CVE-2026-18663 Medium 5.9 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control 0.5%
• CVE-2026-19550 High 8.2 Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 0.5%
• CVE-2026-19546 High 8.8 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute 0.4%
• CVE-2026-71218 Medium 5.3 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion 0.4%
• CVE-2026-71217 High 7.5 Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion 0.6%
• CVE-2026-72693 High 7.8 Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login 0.1%
• CVE-2026-72694 High 7.1 Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation 0.1%
• CVE-2026-19391 Medium 6.5 Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives 0.2%
• CVE-2026-6426 Medium 4.4 Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access 0.4%
• CVE-2026-63622 High 7.8 Libvirt: swtpm privilege escalation via symlink following 0.1%
• CVE-2026-63623 Medium 5.5 Libvirt: information disclosure via world-readable storage volume images during clone/convert <0.1%
• CVE-2026-19404 Medium 6.5 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance 0.4%
• CVE-2026-19389 High 7.1 Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read 0.4%
• CVE-2026-19387 High 7.6 Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder 0.4%
• CVE-2026-61477 Low 2.3 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection 0.2%
• CVE-2026-15816 High 7.5 Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() 0.4%
• CVE-2026-18938 Medium 6.2 P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems 0.1%
• CVE-2026-19079 Medium 4.4 Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation 0.1%
• CVE-2026-7867 High 7.8 Udisks2: udisks2: local privilege escalation via as-user option spoofing 0.2%
• CVE-2026-18649 High 7.5 Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders 1.0%
• CVE-2026-18839 Low 2.2 Popt-devel: popt-static: size_t underflow in singleoptionhelp 0.1%
• CVE-2026-44605 Medium 5.5 Rpm: heap buffer overflow in ndb slot table parsing 0.2%
• CVE-2026-71227 Medium 5.1 Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return 0.2%
• CVE-2026-71226 High 7.3 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path 0.1%
• CVE-2026-71225 Medium 6.5 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries 0.3%
• CVE-2026-68743 Medium 5.5 Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 0.1%
• CVE-2026-70368 Medium 6.5 Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message 0.4%
• CVE-2026-70367 Medium 5.4 Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services 0.2%
• CVE-2026-18739 Low 2.5 Popt-devel: popt-static: off-by-one in poptstuffargs 0.1%
• CVE-2026-68744 Low 3.3 Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply 0.1%
• CVE-2026-18477 Medium 4.4 Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape <0.1%
• CVE-2026-18651 Medium 5.4 389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account 0.3%
• CVE-2026-18508 Medium 4.4 Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 0.1%
• CVE-2026-68742 Medium 5.5 Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 0.1%
• CVE-2026-18358 High 7.5 Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service 0.7%
• CVE-2026-11770 High 7.5 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check 0.5%