# Red Hat Enterprise Linux 10. Every CVE that names Red Hat Enterprise Linux 10 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block](https://agentprime.io/advisories/CVE-2026-18090.md) `CVE-2026-18090` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Libxml2: double-free/uaf in libxml2 python bindings](https://agentprime.io/advisories/CVE-2026-74860.md) `CVE-2026-74860` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)](https://agentprime.io/advisories/CVE-2026-76561.md) `CVE-2026-76561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection - [Glib2: toctou symlink race in \`g_file_create_replace_destination\` fallback path](https://agentprime.io/advisories/CVE-2026-86469.md) `CVE-2026-86469` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal - [389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor](https://agentprime.io/advisories/CVE-2026-19843.md) `CVE-2026-19843` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Command injection - [389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property](https://agentprime.io/advisories/CVE-2026-18922.md) `CVE-2026-18922` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass - [389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search](https://agentprime.io/advisories/CVE-2026-18453.md) `CVE-2026-18453` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption - [389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()](https://agentprime.io/advisories/CVE-2026-18355.md) `CVE-2026-18355` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption - [389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn](https://agentprime.io/advisories/CVE-2026-76560.md) `CVE-2026-76560` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control - [Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service](https://agentprime.io/advisories/CVE-2026-79678.md) `CVE-2026-79678` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Code injection - [Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci](https://agentprime.io/advisories/CVE-2026-76578.md) `CVE-2026-76578` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Authentication bypass - [Flatpak: flatpak: toctou race condition allows symlink redirection](https://agentprime.io/advisories/CVE-2026-76925.md) `CVE-2026-76925` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Race condition - [Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize](https://agentprime.io/advisories/CVE-2026-85769.md) `CVE-2026-85769` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read](https://agentprime.io/advisories/CVE-2026-85534.md) `CVE-2026-85534` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Denial of service - [Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems](https://agentprime.io/advisories/CVE-2026-81666.md) `CVE-2026-81666` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly](https://agentprime.io/advisories/CVE-2026-81665.md) `CVE-2026-81665` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload](https://agentprime.io/advisories/CVE-2026-85197.md) `CVE-2026-85197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption - [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md) `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS - [Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header](https://agentprime.io/advisories/CVE-2026-85150.md) `CVE-2026-85150` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption - [Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()](https://agentprime.io/advisories/CVE-2026-84838.md) `CVE-2026-84838` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection - [Rpm: command injection in \`rpmbuild -t\*\` (\`gettarspec\`) via unescaped tarball path](https://agentprime.io/advisories/CVE-2026-84837.md) `CVE-2026-84837` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection - [Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks](https://agentprime.io/advisories/CVE-2026-78409.md) `CVE-2026-78409` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal - [Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection](https://agentprime.io/advisories/CVE-2026-78410.md) `CVE-2026-78410` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Race condition - [Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority](https://agentprime.io/advisories/CVE-2026-78408.md) `CVE-2026-78408` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.9 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-775 - [Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html](https://agentprime.io/advisories/CVE-2026-53683.md) `CVE-2026-53683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Open redirect - [Gvfs: mtp: out-of-bounds read in do_read()](https://agentprime.io/advisories/CVE-2026-84270.md) `CVE-2026-84270` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: afp: heap-based buffer overflow in dsi read path](https://agentprime.io/advisories/CVE-2026-84269.md) `CVE-2026-84269` · CVE record: GNOME gvfs and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: sftp: uninitialized heap disclosure in read_string()](https://agentprime.io/advisories/CVE-2026-84267.md) `CVE-2026-84267` · CVE record: GNOME gvfs and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gvfs: sftp: heap-based buffer overflow in read_reply()](https://agentprime.io/advisories/CVE-2026-84268.md) `CVE-2026-84268` · CVE record: GNOME gvfs and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames](https://agentprime.io/advisories/CVE-2026-84233.md) `CVE-2026-84233` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts](https://agentprime.io/advisories/CVE-2026-53682.md) `CVE-2026-53682` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure, Broken access control - [Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure](https://agentprime.io/advisories/CVE-2026-11873.md) `CVE-2026-11873` · CVE record: Red Hat Red Hat Certificate System 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure - [Popt-devel: popt-static: short realloc in poptconfigfiletostring](https://agentprime.io/advisories/CVE-2026-18743.md) `CVE-2026-18743` · CVE record: rpm-software-management popt and 4 more · CVSS 2.5 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf](https://agentprime.io/advisories/CVE-2026-13732.md) `CVE-2026-13732` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption - [Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite](https://agentprime.io/advisories/CVE-2026-81624.md) `CVE-2026-81624` · CVE record: Red Hat Red Hat build of Apache Camel for Spring Boot 4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: Denial of service - [Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data](https://agentprime.io/advisories/CVE-2026-82327.md) `CVE-2026-82327` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-129 - [Jwcrypto: jwcrypto: denial of service via malformed jwe tokens](https://agentprime.io/advisories/CVE-2026-80179.md) `CVE-2026-80179` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service - [Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery](https://agentprime.io/advisories/CVE-2026-81893.md) `CVE-2026-81893` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption - [Undertow-core: undertow: denial of service via websocket permessage-deflate processing](https://agentprime.io/advisories/CVE-2026-5680.md) `CVE-2026-5680` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 8.1.8.GA and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service - [Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function](https://agentprime.io/advisories/CVE-2026-78002.md) `CVE-2026-78002` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption - [Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root](https://agentprime.io/advisories/CVE-2026-80185.md) `CVE-2026-80185` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption - [Bluez: stack overflow in name2utf8 causes dos and potential code execution](https://agentprime.io/advisories/CVE-2026-80186.md) `CVE-2026-80186` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption - [Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix](https://agentprime.io/advisories/CVE-2026-77680.md) `CVE-2026-77680` · CVE record: Red Hat Red Hat Enterprise Linux 10 · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Denial of service - [Emacs: emacs: command injection via crafted filenames in tramp](https://agentprime.io/advisories/CVE-2026-79992.md) `CVE-2026-79992` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Command injection - [Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write](https://agentprime.io/advisories/CVE-2026-79655.md) `CVE-2026-79655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal - [389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos](https://agentprime.io/advisories/CVE-2026-78701.md) `CVE-2026-78701` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption - [Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)](https://agentprime.io/advisories/CVE-2026-19685.md) `CVE-2026-19685` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 24 Aug 2026 · Tags: Broken access control - [Rpm: rpmbuild gettarspec() crafted tar member name → macro injection](https://agentprime.io/advisories/CVE-2026-78367.md) `CVE-2026-78367` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 7.0 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection - [Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates](https://agentprime.io/advisories/CVE-2026-78323.md) `CVE-2026-78323` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Weak cryptography or TLS - [Ipa: freeipa: null pointer dereference in \`ipa-enrollment\` extended operation (\`join_oid\`) via missing request value](https://agentprime.io/advisories/CVE-2026-73199.md) `CVE-2026-73199` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships](https://agentprime.io/advisories/CVE-2026-11861.md) `CVE-2026-11861` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [Ipa: freeipa: unauthenticated dos in \`/ipa/i18n_messages\` via unbounded request body read](https://agentprime.io/advisories/CVE-2026-73198.md) `CVE-2026-73198` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore](https://agentprime.io/advisories/CVE-2026-13097.md) `CVE-2026-13097` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-706 - [Ipa: freeipa: authenticated dos in \`otptoken-add\` via unbounded otp key decoding/re-encoding](https://agentprime.io/advisories/CVE-2026-73196.md) `CVE-2026-73196` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [Ipa: freeipa: unauthenticated dos in \`/ipa/migration/migration.py\` via unbounded request body read](https://agentprime.io/advisories/CVE-2026-73197.md) `CVE-2026-73197` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow](https://agentprime.io/advisories/CVE-2026-18917.md) `CVE-2026-18917` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses](https://agentprime.io/advisories/CVE-2026-77014.md) `CVE-2026-77014` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-197 - [Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution](https://agentprime.io/advisories/CVE-2026-43961.md) `CVE-2026-43961` · CVE record: vim vim and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html](https://agentprime.io/advisories/CVE-2026-76235.md) `CVE-2026-76235` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Denial of service - [Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch](https://agentprime.io/advisories/CVE-2026-75900.md) `CVE-2026-75900` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .