# Red Hat Enterprise Linux 10. Every CVE that names Red Hat Enterprise Linux 10 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback](https://agentprime.io/advisories/CVE-2026-59692.md) `CVE-2026-59692` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer](https://agentprime.io/advisories/CVE-2026-59691.md) `CVE-2026-59691` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification](https://agentprime.io/advisories/CVE-2026-15041.md) `CVE-2026-15041` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-208 - [389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption](https://agentprime.io/advisories/CVE-2026-14969.md) `CVE-2026-14969` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-329 - [Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check](https://agentprime.io/advisories/CVE-2026-14935.md) `CVE-2026-14935` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-670 - [389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn](https://agentprime.io/advisories/CVE-2026-14940.md) `CVE-2026-14940` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind](https://agentprime.io/advisories/CVE-2026-11610.md) `CVE-2026-11610` · CVE record: 389ds 389-ds-base and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Memory corruption - [Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass](https://agentprime.io/advisories/CVE-2026-14476.md) `CVE-2026-14476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal - [Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation](https://agentprime.io/advisories/CVE-2026-14474.md) `CVE-2026-14474` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-1188 - [Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization](https://agentprime.io/advisories/CVE-2026-14612.md) `CVE-2026-14612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Hplip: incomplete fix for cve-2026-8631](https://agentprime.io/advisories/CVE-2026-14544.md) `CVE-2026-14544` · CVE record: HP HPLIP and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jul 2026 · Tags: Memory corruption - [Pipewire: pulse server alloca stack overflow](https://agentprime.io/advisories/CVE-2026-14330.md) `CVE-2026-14330` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Pipewire: raop rtsp null deref](https://agentprime.io/advisories/CVE-2026-14324.md) `CVE-2026-14324` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption - [Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling](https://agentprime.io/advisories/CVE-2026-14258.md) `CVE-2026-14258` · CVE record: Red Hat Red Hat Enterprise Linux 10 · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"](https://agentprime.io/advisories/CVE-2026-58016.md) `CVE-2026-58016` · CVE record: GNOME GLib and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive](https://agentprime.io/advisories/CVE-2026-58015.md) `CVE-2026-58015` · CVE record: GNOME GLib and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal - [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md) `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193 - [Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"](https://agentprime.io/advisories/CVE-2026-58013.md) `CVE-2026-58013` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()](https://agentprime.io/advisories/CVE-2026-58012.md) `CVE-2026-58012` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime](https://agentprime.io/advisories/CVE-2026-58011.md) `CVE-2026-58011` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()](https://agentprime.io/advisories/CVE-2026-58010.md) `CVE-2026-58010` · CVE record: GNOME GLib and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-126 - [Sssd: use-after-free crash in sssd' 'sssd_pam' process](https://agentprime.io/advisories/CVE-2026-12610.md) `CVE-2026-12610` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()](https://agentprime.io/advisories/CVE-2026-14164.md) `CVE-2026-14164` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Memory corruption - [P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing](https://agentprime.io/advisories/CVE-2026-13757.md) `CVE-2026-13757` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Denial of service - [Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image](https://agentprime.io/advisories/CVE-2026-12912.md) `CVE-2026-12912` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Util-linux: util-linux: heap use-after-free in libblkid nested partition probing](https://agentprime.io/advisories/CVE-2026-13595.md) `CVE-2026-13595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Spice-vdagent: path traversal in file transfer via unsanitized filename](https://agentprime.io/advisories/CVE-2026-57966.md) `CVE-2026-57966` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Path traversal - [Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow](https://agentprime.io/advisories/CVE-2026-57965.md) `CVE-2026-57965` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser](https://agentprime.io/advisories/CVE-2026-12892.md) `CVE-2026-12892` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser](https://agentprime.io/advisories/CVE-2026-12891.md) `CVE-2026-12891` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Community.general: community.general nexmo — api credentials exposed in get url query string\[security\] community.general nexmo — api credentials exposed in get url query string](https://agentprime.io/advisories/CVE-2026-11820.md) `CVE-2026-11820` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Information disclosure - [Community.general: community.general keyring_info — os keyring passphrase returned in plaintext](https://agentprime.io/advisories/CVE-2026-11819.md) `CVE-2026-11819` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Information disclosure - [Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation](https://agentprime.io/advisories/CVE-2026-12969.md) `CVE-2026-12969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination](https://agentprime.io/advisories/CVE-2026-55654.md) `CVE-2026-55654` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions](https://agentprime.io/advisories/CVE-2026-55655.md) `CVE-2026-55655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-923 - [Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service](https://agentprime.io/advisories/CVE-2026-55653.md) `CVE-2026-55653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption - [Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver](https://agentprime.io/advisories/CVE-2026-12549.md) `CVE-2026-12549` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Memory corruption - [Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies](https://agentprime.io/advisories/CVE-2026-12725.md) `CVE-2026-12725` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames](https://agentprime.io/advisories/CVE-2026-56211.md) `CVE-2026-56211` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id](https://agentprime.io/advisories/CVE-2026-56210.md) `CVE-2026-56210` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack](https://agentprime.io/advisories/CVE-2026-56209.md) `CVE-2026-56209` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)](https://agentprime.io/advisories/CVE-2026-3195.md) `CVE-2026-3195` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation](https://agentprime.io/advisories/CVE-2026-3196.md) `CVE-2026-3196` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()](https://agentprime.io/advisories/CVE-2026-11791.md) `CVE-2026-11791` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Memory corruption - [Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall](https://agentprime.io/advisories/CVE-2026-12505.md) `CVE-2026-12505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation - [389-ds-base: 389-ds-base: heap-buffer-overflows in \_\_aclp\_\_normalize_acltxt()](https://agentprime.io/advisories/CVE-2026-12528.md) `CVE-2026-12528` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Memory corruption - [Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling](https://agentprime.io/advisories/CVE-2026-2604.md) `CVE-2026-2604` · CVE record: GNOME Evolution Data Server and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Path traversal - [Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing](https://agentprime.io/advisories/CVE-2026-4367.md) `CVE-2026-4367` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression](https://agentprime.io/advisories/CVE-2026-10649.md) `CVE-2026-10649` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin](https://agentprime.io/advisories/CVE-2026-42014.md) `CVE-2026-42014` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags](https://agentprime.io/advisories/CVE-2026-1767.md) `CVE-2026-1767` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.](https://agentprime.io/advisories/CVE-2026-1766.md) `CVE-2026-1766` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and potential information disclosure via crafted mp3 files](https://agentprime.io/advisories/CVE-2026-1765.md) `CVE-2026-1765` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files](https://agentprime.io/advisories/CVE-2026-1764.md) `CVE-2026-1764` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion](https://agentprime.io/advisories/CVE-2026-52718.md) `CVE-2026-52718` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling](https://agentprime.io/advisories/CVE-2026-52722.md) `CVE-2026-52722` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb](https://agentprime.io/advisories/CVE-2026-52720.md) `CVE-2026-52720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser](https://agentprime.io/advisories/CVE-2026-53704.md) `CVE-2026-53704` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser](https://agentprime.io/advisories/CVE-2026-53703.md) `CVE-2026-53703` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption - [Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing](https://agentprime.io/advisories/CVE-2026-52721.md) `CVE-2026-52721` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .