RH
Product
Red Hat Enterprise Linux 10
On CISA KEVExploited in the wild
1,095
CVEs
3
On KEV
10.0
Max CVSS
123
New 30D
Severity mix
Critical 130High 370Medium 0Low 0
Watch
Add Red Hat Enterprise Linux 10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43964 | 7.5 | May 4 | Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third… Affected: All versions, or not specified |
| CVE-2026-33846 | 7.5 | May 4 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly Affected: All versions, or not specified |
| CVE-2026-37459 | 7.5 | May 4 | An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message Affected: All versions, or not specified |
| CVE-2026-37457 | 7.5 | May 1 | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a… Affected: All versions, or not specified |
| CVE-2026-42198 | 7.5 | Apr 29 | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS Affected: All versions, or not specified |
| CVE-2026-37555 | 7.5 | Apr 29 | An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec Affected: All versions, or not specified |
| CVE-2026-7320 | 7.5 | Apr 28 | Information disclosure due to incorrect boundary conditions in the Audio/Video component Affected: All versions, or not specified |
| CVE-2026-34282 | 7.5 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: All versions, or not specified |
| CVE-2026-22016 | 7.5 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2026-6786 | 7.5 | Apr 21 | Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 Affected: All versions, or not specified |
| CVE-2026-6785 | 7.5 | Apr 21 | Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 Affected: All versions, or not specified |
| CVE-2026-6754 | 7.5 | Apr 21 | Use-after-free in the JavaScript Engine component Affected: All versions, or not specified |
| CVE-2026-6749 | 7.5 | Apr 21 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component Affected: All versions, or not specified |
| CVE-2026-6747 | 7.5 | Apr 21 | Use-after-free in the WebRTC component Affected: All versions, or not specified |
| CVE-2026-6746 | 7.5 | Apr 21 | Use-after-free in the DOM: Core & HTML component Affected: All versions, or not specified |
| CVE-2026-40170 | 7.5 | Apr 16 | ngtcp2 has a qlog transport parameter serialization stack buffer overflow Affected: All versions, or not specified |
| CVE-2026-32203 | 7.5 | Apr 14 | .NET and Visual Studio Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2026-26171 | 7.5 | Apr 14 | .NET Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2026-33116 | 7.5 | Apr 14 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2026-32178 | 7.5 | Apr 14 | .NET Spoofing Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
