Vulnerabilities

Red Hat Enterprise Linux 10.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

200CVEs

CVE-2025-62231

Xorg: xmayland: value overflow in xkbsetcompatmap()

Published 2025-10-30 · Analyzed

7.3EPSS 0.003

CVE-2025-62230

Xorg: xwayland: use-after-free in xkb client resource removal

Published 2025-10-30 · Analyzed

7.3EPSS 0.003

CVE-2026-71226

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Published 2026-08-05 · Modified

7.3EPSS 0.002

CVE-2026-15370

Libssh: libssh: stack buffer overflow in sftp server longname construction

Published 2026-07-21 · Analyzed

7.3EPSS 0.002

CVE-2026-66338

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

Published 2026-07-24 · Analyzed

7.2EPSS 0.003

CVE-2026-1933

Samba: missing access check on reparse point operations

Published 2026-05-27 · Modified

7.1EPSS 0.009

CVE-2026-3441

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

Published 2026-03-15 · Modified

7.1EPSS 0.002

CVE-2026-3442

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

Published 2026-03-15 · Modified

7.1EPSS 0.002

CVE-2026-5673

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

Published 2026-04-06 · Analyzed

7.1EPSS 0.002

CVE-2026-68743

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Published 2026-08-04 · Analyzed

7.1EPSS 0.001

CVE-2026-26103

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

Published 2026-02-25 · Modified

7.1EPSS 0.001

CVE-2025-2784

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Published 2025-04-03 · Modified

7.0EPSS 0.008

CVE-2026-4878

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Published 2026-04-09 · Modified

7.0EPSS 0.001

CVE-2024-12086

Rsync: rsync server leaks arbitrary client files

Published 2025-01-14 · Modified

6.8EPSS 0.018

CVE-2026-13595

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Published 2026-06-29 · Analyzed

6.8EPSS 0.002

CVE-2024-45777

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

Published 2025-02-19 · Modified

6.7EPSS 0.002

CVE-2025-7519

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

Published 2025-07-14 · Analyzed

6.7EPSS 0.002

CVE-2026-5164

Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request

Published 2026-03-30 · Analyzed

6.7EPSS 0.002

CVE-2025-5915

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

Published 2025-06-09 · Modified

6.6EPSS 0.002

CVE-2026-73433

Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write

Published 2026-08-12 · Undergoing Analysis

6.6EPSS 0.001

CVE-2026-73583

Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr

Published 2026-08-13 · Analyzed

6.6EPSS 0.001

CVE-2026-2340

Samba: vfs_worm does not block directory modification

Published 2026-05-27 · Modified

6.5EPSS 0.009

CVE-2026-59844

Libssh: libssh: denial of service via oversized sftp read length

Published 2026-07-21 · Modified

6.5EPSS 0.007

CVE-2026-59843

Libssh: libssh: denial of service via zero advertised channel packet size

Published 2026-07-21 · Modified

6.5EPSS 0.007

CVE-2026-9150

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

Published 2026-05-20 · Modified

6.5EPSS 0.006

CVE-2025-14512

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Published 2025-12-11 · Modified

6.5EPSS 0.006

CVE-2025-5351

Libssh: double free vulnerability in libssh key export functions

Published 2025-07-04 · Modified

6.5EPSS 0.006

CVE-2026-9149

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Published 2026-05-20 · Modified

6.5EPSS 0.006

CVE-2026-4426

Libarchive: libarchive: denial of service via malformed iso file processing

Published 2026-03-19 · Modified

6.5EPSS 0.006

CVE-2026-71225

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Published 2026-08-05 · Modified

6.5EPSS 0.005

CVE-2025-4478

Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service

Published 2025-05-16 · Modified

6.5EPSS 0.005

CVE-2026-55653

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Published 2026-06-23 · Modified

6.5EPSS 0.005

CVE-2025-47712

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

Published 2025-06-09 · Modified

6.5EPSS 0.005

CVE-2025-12801

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Published 2026-03-04 · Modified

6.5EPSS 0.005

CVE-2025-47711

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

Published 2025-06-09 · Modified

6.5EPSS 0.005

CVE-2026-73196

Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

Published 2026-08-20 · Analyzed

6.5EPSS 0.004

CVE-2026-1801

Libsoup: libsoup: http request smuggling via malformed chunk headers

Published 2026-02-03 · Analyzed

6.5EPSS 0.004

CVE-2026-11820

Community.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string

Published 2026-06-23 · Analyzed

6.5EPSS 0.004

CVE-2026-66339

Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

Published 2026-07-24 · Analyzed

6.5EPSS 0.004

CVE-2026-66337

Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()

Published 2026-07-24 · Analyzed

6.5EPSS 0.004

Red Hat Enterprise Linux 10.0

Security check