Vulnerabilities

Red Hat Enterprise Linux 10.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

200CVEs

CVE-2026-3633

Libsoup: libsoup: header and http request injection via crlf injection

Published 2026-03-17 · Analyzed

6.5EPSS 0.004

CVE-2026-3634

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

Published 2026-03-17 · Analyzed

6.5EPSS 0.003

CVE-2026-11789

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

Published 2026-06-09 · Modified

6.5EPSS 0.003

CVE-2026-11611

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

Published 2026-06-08 · Modified

6.5EPSS 0.002

CVE-2026-18726

Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing

Published 2026-08-12 · Analyzed

6.5EPSS 0.002

CVE-2026-18728

Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing

Published 2026-08-13 · Analyzed

6.5EPSS 0.002

CVE-2026-18727

Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing

Published 2026-08-12 · Analyzed

6.5EPSS 0.002

CVE-2026-11786

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

Published 2026-06-09 · Modified

6.5EPSS 0.002

CVE-2026-12610

Sssd: use-after-free crash in sssd' 'sssd_pam' process

Published 2026-06-30 · Undergoing Analysis

6.4EPSS 0.001

CVE-2026-0964

Libssh: improper sanitation of paths received from scp servers

Published 2026-03-26 · Modified

6.3EPSS 0.004

CVE-2026-11787

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

Published 2026-06-09 · Modified

6.3EPSS 0.002

CVE-2026-73585

Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

Published 2026-08-13 · Analyzed

6.3EPSS 0.001

CVE-2026-73584

Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Published 2026-08-13 · Analyzed

6.3EPSS 0.001

CVE-2026-13757

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Published 2026-06-29 · Modified

6.2EPSS 0.002

CVE-2026-4647

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

Published 2026-03-23 · Modified

6.1EPSS 0.002

CVE-2026-1766

Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.

Published 2026-06-16 · Analyzed

6.1EPSS 0.002

CVE-2026-73434

Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

Published 2026-08-12 · Undergoing Analysis

6.1EPSS 0.001

CVE-2026-55655

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Published 2026-06-23 · Modified

6.1EPSS 0.001

CVE-2026-0990

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

Published 2026-01-15 · Analyzed

5.9EPSS 0.010

CVE-2026-12725

Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

Published 2026-06-22 · Analyzed

5.9EPSS 0.005

CVE-2026-59845

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

Published 2026-07-21 · Modified

5.9EPSS 0.001

CVE-2026-1467

Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured

Published 2026-01-27 · Analyzed

5.8EPSS 0.004

CVE-2026-1536

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header

Published 2026-01-28 · Analyzed

5.8EPSS 0.003

CVE-2026-1539

Libsoup: libsoup: credential leakage via http redirects

Published 2026-01-28 · Analyzed

5.8EPSS 0.003

CVE-2026-1764

Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files

Published 2026-06-16 · Analyzed

5.6EPSS 0.002

CVE-2025-5916

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

Published 2025-06-09 · Modified

5.6EPSS 0.002

CVE-2026-5704

Tar: tar: hidden file injection via crafted archives

Published 2026-04-06 · Modified

5.5EPSS 0.004

CVE-2026-3632

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Published 2026-03-17 · Analyzed

5.5EPSS 0.003

CVE-2026-0967

Libssh: libssh: denial of service via inefficient regular expression processing

Published 2026-03-26 · Modified

5.5EPSS 0.002

CVE-2026-50263

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Published 2026-06-05 · Modified

5.5EPSS 0.002

CVE-2026-50262

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

Published 2026-06-05 · Modified

5.5EPSS 0.002

CVE-2026-5745

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Published 2026-04-07 · Modified

5.5EPSS 0.002

CVE-2026-11819

Community.general: community.general keyring_info — os keyring passphrase returned in plaintext

Published 2026-06-23 · Analyzed

5.5EPSS 0.002

CVE-2026-19548

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Published 2026-08-12 · Analyzed

5.5EPSS 0.002

CVE-2026-4897

Polkit: polkit: denial of service via unbounded input processing through standard input

Published 2026-03-26 · Modified

5.5EPSS 0.002

CVE-2026-6245

Sssd: out-of-bounds read in the sssd

Published 2026-04-15 · Analyzed

5.5EPSS 0.001

CVE-2026-6844

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Published 2026-04-22 · Analyzed

5.5EPSS 0.001

CVE-2026-6843

Nano: nano: format string vulnerability leads to denial of service

Published 2026-04-22 · Analyzed

5.5EPSS 0.001

CVE-2026-19617

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Published 2026-08-14 · Analyzed

5.5EPSS 0.001

CVE-2026-68742

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Published 2026-08-03 · Analyzed

5.5EPSS 0.001

Red Hat Enterprise Linux 10.0

Security check