# Red Hat Enterprise Linux 10. Every CVE that names Red Hat Enterprise Linux 10 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd](https://agentprime.io/advisories/CVE-2026-89096.md) `CVE-2026-89096` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Parted: parted: denial of service via heap buffer overflow during fat16 resize](https://agentprime.io/advisories/CVE-2026-89088.md) `CVE-2026-89088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image](https://agentprime.io/advisories/CVE-2026-89085.md) `CVE-2026-89085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Nautilus: nautilus: arbitrary file deletion via trash symlink](https://agentprime.io/advisories/CVE-2026-111802.md) `CVE-2026-111802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Path traversal - [Libarchive: libarchive: use-after-free via aliased mac metadata copy](https://agentprime.io/advisories/CVE-2026-17591.md) `CVE-2026-17591` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 3.6 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: paa integer overflow out-of-bounds read](https://agentprime.io/advisories/CVE-2026-62438.md) `CVE-2026-62438` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2026-62439.md) `CVE-2026-62439` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding](https://agentprime.io/advisories/CVE-2026-85977.md) `CVE-2026-85977` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1050 - [Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding](https://agentprime.io/advisories/CVE-2026-85231.md) `CVE-2026-85231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd](https://agentprime.io/advisories/CVE-2026-89098.md) `CVE-2026-89098` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service - [Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method](https://agentprime.io/advisories/CVE-2026-111581.md) `CVE-2026-111581` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Luksmeta: missing slot-range validation permits out-of-gap device i/o](https://agentprime.io/advisories/CVE-2026-111555.md) `CVE-2026-111555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1285 - [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md) `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection - [Evolution-data-server: local file disclosure via attach file:// uris](https://agentprime.io/advisories/CVE-2026-110777.md) `CVE-2026-110777` · CVE record: GNOME evolution-data-server and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86849.md) `CVE-2026-86849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver](https://agentprime.io/advisories/CVE-2026-86856.md) `CVE-2026-86856` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup](https://agentprime.io/advisories/CVE-2026-86847.md) `CVE-2026-86847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86846.md) `CVE-2026-86846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup](https://agentprime.io/advisories/CVE-2026-86845.md) `CVE-2026-86845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)](https://agentprime.io/advisories/CVE-2026-86566.md) `CVE-2026-86566` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md) `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap](https://agentprime.io/advisories/CVE-2026-86567.md) `CVE-2026-86567` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: heap out-of-bounds read/write in gso header copy](https://agentprime.io/advisories/CVE-2026-100236.md) `CVE-2026-100236` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write](https://agentprime.io/advisories/CVE-2026-86565.md) `CVE-2026-86565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: double offset bug in vhost log mapping calculation](https://agentprime.io/advisories/CVE-2026-86563.md) `CVE-2026-86563` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md) `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md) `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md) `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file](https://agentprime.io/advisories/CVE-2026-109968.md) `CVE-2026-109968` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check](https://agentprime.io/advisories/CVE-2026-100229.md) `CVE-2026-100229` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool](https://agentprime.io/advisories/CVE-2026-109971.md) `CVE-2026-109971` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-214 - [Clevis: clevis: pkcs#11 token pin written to world-readable file](https://agentprime.io/advisories/CVE-2026-109970.md) `CVE-2026-109970` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Information disclosure - [Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask](https://agentprime.io/advisories/CVE-2026-109969.md) `CVE-2026-109969` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters](https://agentprime.io/advisories/CVE-2026-100231.md) `CVE-2026-100231` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize](https://agentprime.io/advisories/CVE-2026-86476.md) `CVE-2026-86476` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices](https://agentprime.io/advisories/CVE-2026-110036.md) `CVE-2026-110036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()](https://agentprime.io/advisories/CVE-2026-105460.md) `CVE-2026-105460` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection](https://agentprime.io/advisories/CVE-2026-109976.md) `CVE-2026-109976` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service](https://agentprime.io/advisories/CVE-2026-109833.md) `CVE-2026-109833` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)](https://agentprime.io/advisories/CVE-2026-109832.md) `CVE-2026-109832` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding](https://agentprime.io/advisories/CVE-2026-109854.md) `CVE-2026-109854` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.5 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path](https://agentprime.io/advisories/CVE-2026-108094.md) `CVE-2026-108094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 7.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading](https://agentprime.io/advisories/CVE-2026-108093.md) `CVE-2026-108093` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry](https://agentprime.io/advisories/CVE-2026-108063.md) `CVE-2026-108063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose](https://agentprime.io/advisories/CVE-2026-107935.md) `CVE-2026-107935` · CVE record: Red Hat Red Hat Build of Podman Desktop and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal - [Cups: null pointer dereference via embedded job ticket comments allows remote denial of service](https://agentprime.io/advisories/CVE-2026-107655.md) `CVE-2026-107655` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md) `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption](https://agentprime.io/advisories/CVE-2026-107565.md) `CVE-2026-107565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-1284 - [Flatpak-builder: local file exfiltration via \`file](https://agentprime.io/advisories/CVE-2026-107466.md) `CVE-2026-107466` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients](https://agentprime.io/advisories/CVE-2026-107161.md) `CVE-2026-107161` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in hot color filter on oversized image](https://agentprime.io/advisories/CVE-2026-106067.md) `CVE-2026-106067` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106066.md) `CVE-2026-106066` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106065.md) `CVE-2026-106065` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8](https://agentprime.io/advisories/CVE-2026-107169.md) `CVE-2026-107169` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: heap use-after-free write in re_init_ic()](https://agentprime.io/advisories/CVE-2026-107167.md) `CVE-2026-107167` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106064.md) `CVE-2026-106064` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null dereference in minput_open_im() after failed m17n_init()](https://agentprime.io/advisories/CVE-2026-107170.md) `CVE-2026-107170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.9 Low · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()](https://agentprime.io/advisories/CVE-2026-107168.md) `CVE-2026-107168` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file](https://agentprime.io/advisories/CVE-2026-106061.md) `CVE-2026-106061` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Sssd: sssd-kcm: local denial of service via excessive memory preallocation](https://agentprime.io/advisories/CVE-2026-80048.md) `CVE-2026-80048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .