Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Medium	Oct 21, 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Medium	Oct 21, 2026
CVE-2026-113496	Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments	5.0 Medium	Oct 20, 2026
CVE-2026-113495	Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments	5.0 Medium	Oct 20, 2026
CVE-2026-112177	Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8	7.3 High	Oct 20, 2026
CVE-2026-112261	Gimp: gimp: use-after-free in xcf loader via prop_selected_path	7.8 High	Oct 19, 2026
CVE-2026-112258	Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels	7.8 High	Oct 19, 2026
CVE-2026-112257	Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)	7.8 High	Oct 19, 2026
CVE-2026-112260	Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing	7.1 High	Oct 19, 2026
CVE-2026-112259	Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import	5.5 Medium	Oct 19, 2026
CVE-2026-112214	Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser	6.5 Medium	Oct 19, 2026
CVE-2026-112210	A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc	6.0 Medium	Oct 19, 2026
CVE-2026-16460	Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization	7.4 High	Oct 19, 2026
CVE-2026-16487	A flaw was found in bootc when operating with the default containers signature policy	8.1 High	Oct 19, 2026
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Medium	Oct 16, 2026
CVE-2026-89088	Parted: parted: denial of service via heap buffer overflow during fat16 resize	5.5 Medium	Oct 16, 2026
CVE-2026-89085	Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image	6.6 Medium	Oct 16, 2026
CVE-2026-111802	Nautilus: nautilus: arbitrary file deletion via trash symlink	6.6 Medium	Oct 16, 2026
CVE-2026-17591	Libarchive: libarchive: use-after-free via aliased mac metadata copy	3.6 Low	Oct 16, 2026
CVE-2026-62438	Gimp: gimp: paa integer overflow out-of-bounds read	6.1 Medium	Oct 16, 2026
CVE-2026-62439	Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability	7.0 High	Oct 16, 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Medium	Oct 16, 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Medium	Oct 16, 2026
CVE-2026-89098	Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd	5.5 Medium	Oct 16, 2026
CVE-2026-111581	Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method	3.3 Low	Oct 16, 2026

Other Red Hat products