RH
Product
Red Hat Enterprise Linux 10
by Red Hat · last CVE Oct 26, 2026
On CISA KEVExploited in the wild
1,095
CVEs
3
On KEV
10.0
Max CVSS
123
New 30D
Severity mix
Critical 130High 370Medium 0Low 0
Watch

Add Red Hat Enterprise Linux 10 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-43964
7.5
1%
May 4
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third…
Affected: All versions, or not specified
CVE-2026-33846
7.5
1%
May 4
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Affected: All versions, or not specified
CVE-2026-37459
7.5
0%
May 4
An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message
Affected: All versions, or not specified
CVE-2026-37457
7.5
0%
May 1
An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a…
Affected: All versions, or not specified
CVE-2026-42198
7.5
3%
Apr 29
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
Affected: All versions, or not specified
CVE-2026-37555
7.5
1%
Apr 29
An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec
Affected: All versions, or not specified
CVE-2026-7320
7.5
0%
Apr 28
Information disclosure due to incorrect boundary conditions in the Audio/Video component
Affected: All versions, or not specified
CVE-2026-34282
7.5
1%
Apr 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: All versions, or not specified
CVE-2026-22016
7.5
1%
Apr 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: All versions, or not specified
CVE-2026-6786
7.5
0%
Apr 21
Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
Affected: All versions, or not specified
CVE-2026-6785
7.5
1%
Apr 21
Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
Affected: All versions, or not specified
CVE-2026-6754
7.5
0%
Apr 21
Use-after-free in the JavaScript Engine component
Affected: All versions, or not specified
CVE-2026-6749
7.5
0%
Apr 21
Information disclosure due to uninitialized memory in the Graphics: Canvas2D component
Affected: All versions, or not specified
CVE-2026-6747
7.5
0%
Apr 21
Use-after-free in the WebRTC component
Affected: All versions, or not specified
CVE-2026-6746
7.5
1%
Apr 21
Use-after-free in the DOM: Core & HTML component
Affected: All versions, or not specified
CVE-2026-40170
7.5
1%
Apr 16
ngtcp2 has a qlog transport parameter serialization stack buffer overflow
Affected: All versions, or not specified
CVE-2026-32203
7.5
2%
Apr 14
.NET and Visual Studio Denial of Service Vulnerability
Affected: All versions, or not specified
CVE-2026-26171
7.5
2%
Apr 14
.NET Denial of Service Vulnerability
Affected: All versions, or not specified
CVE-2026-33116
7.5
2%
Apr 14
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Affected: All versions, or not specified
CVE-2026-32178
7.5
2%
Apr 14
.NET Spoofing Vulnerability
Affected: All versions, or not specified
Page 8 of 8 · 370 total
1…78
The 500 most important CVEs for this product (exploited first, then by severity)