Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
156 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | corrigé en 0:2026.2.92_v9.0.319-100.3.el10_0 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-96889 | corrigé en 0:2.57.1-9.el10_0.1 | Librsvg: use-after-free when xml includes have duplicated entities | HIGH 7.8 | 0.6 % | ||
| CVE-2026-96512 | corrigé en 0:1.9.15-8.p5.el10_0.5 | Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization | HIGH 7.8 | 0.3 % | ||
| CVE-2026-80110 | corrigé en 0:11.6.0-3.el10_0.1 | Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endp… | HIGH 8.1 | 0.2 % | ||
| CVE-2026-86320 | corrigé en 0:1.4.4-1.el10_0.1 | Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`) | HIGH 7.8 | 0.3 % | ||
| CVE-2026-88924 | corrigé en 0:1.54.4-2.el10_0.2 | Gvfs: gvfs-admin socket ownership race permits local root | HIGH 7.0 | 0.2 % | ||
| CVE-2026-18147 | corrigé en 0:4.12.2-15.el10_0.7 | Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url | HIGH 8.1 | 0.5 % | ||
| CVE-2026-87766 | corrigé en 0:0.10.0-3.el10_0.4 | Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup | HIGH 8.8 | 0.2 % | ||
| CVE-2026-74860 | corrigé en 0:2.12.5-9.el10_0.9 | Libxml2: double-free/uaf in libxml2 python bindings | HIGH 8.5 | 0.7 % | ||
| CVE-2026-76561 | corrigé en 0:11.6.0-3.el10_0.1 | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) | HIGH 7.2 | 0.7 % | ||
| CVE-2026-18922 | | 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl aux… | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-18453 | | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18355 | | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-76560 | | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn | HIGH 7.5 | 0.6 % | ||
| CVE-2026-79678 | corrigé en 0:4.12.2-15.el10_0.7 | Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service | HIGH 8.1 | 0.9 % | ||
| CVE-2026-76578 | corrigé en 0:4.12.2-15.el10_0.7 | Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci | CRITICAL 9.8 | 1.2 % | ||
| CVE-2026-81665 | corrigé en 0:3.1.9-1.el10_0.3 | Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly | HIGH 7.5 | 0.4 % | ||
| CVE-2026-85197 | corrigé en 0:3.6.5-3.el10_0.18 | Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload | HIGH 7.6 | 0.3 % | ||
| CVE-2026-84268 | corrigé en 0:1.54.4-2.el10_0.2 | Gvfs: sftp: heap-based buffer overflow in read_reply() | HIGH 8.8 | 0.6 % | ||
| CVE-2026-78002 | corrigé en 0:8.2412.0-1.el10_0.2 | Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function | HIGH 7.5 | 1.1 % | ||
| CVE-2026-11861 | corrigé en 0:4.12.2-15.el10_0.7 | Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships | CRITICAL 9.6 | 0.4 % | ||
| CVE-2026-73198 | corrigé en 0:4.12.2-15.el10_0.7 | Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read | HIGH 7.5 | 0.5 % | ||
| CVE-2026-13097 | corrigé en 0:4.12.2-15.el10_0.7 | Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore | HIGH 8.7 | 0.7 % | ||
| CVE-2026-73197 | corrigé en 0:4.12.2-15.el10_0.7 | Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read | HIGH 7.5 | 0.5 % | ||
| CVE-2026-18917 | corrigé en 0:10.10.0-8.12.el10_0 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-19654 | corrigé en 0:8.2412.0-1.el10_0.1 | Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsys… | HIGH 7.5 | 0.6 % | ||
| CVE-2026-73433 | corrigé en 0:1.24.11-1.el10_0.4 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-73434 | corrigé en 0:1.24.11-1.el10_0.4 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-19550 | corrigé en 0:4.12.2-15.el10_0.7 | Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes | HIGH 8.2 | 0.5 % | ||
| CVE-2026-72694 | corrigé en 0:2.17.10-11.el10_0.1 | Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation | HIGH 7.1 | 0.1 % | ||
| CVE-2026-63622 | corrigé en 0:10.10.0-8.11.el10_0 | Libvirt: swtpm privilege escalation via symlink following | HIGH 7.8 | 0.1 % | ||
| CVE-2026-19389 | corrigé en 0:1.24.11-1.el10_0.3 | Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read | HIGH 7.1 | 0.4 % | ||
| CVE-2026-19387 | corrigé en 0:1.24.11-3.el10_0.7 | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder | HIGH 7.6 | 0.4 % | ||
| CVE-2026-15816 | corrigé en 0:105-4.el10_0.1 | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.5 % | ||
| CVE-2026-7867 | corrigé en 0:2.10.90-5.el10_0.3 | Udisks2: udisks2: local privilege escalation via as-user option spoofing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-18649 | corrigé en 0:1.24.11-1.el10_0.4 | Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders | HIGH 7.5 | 1.0 % | ||
| CVE-2026-71227 | corrigé en 0:1.5.0-6.el10_0 | Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-71226 | corrigé en 0:1.5.0-6.el10_0 | Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path | HIGH 7.3 | 0.1 % | ||
| CVE-2026-71225 | corrigé en 0:1.5.0-6.el10_0 | Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-18358 | corrigé en 0:47.3-3.el10_0.1 | Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service | HIGH 7.5 | 0.7 % | ||
| CVE-2026-11770 | | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15722 | | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing | HIGH 7.5 | 0.8 % | ||
| CVE-2026-16529 | corrigé en 0:6.3.7-1.el10_0.1 | Pcp: pcp: denial of service due to signed integer overflow | HIGH 7.5 | 0.5 % | ||
| CVE-2026-16527 | corrigé en 0:6.3.7-1.el10_0.1 | Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules | HIGH 7.3 | 0.6 % | ||
| CVE-2026-16526 | corrigé en 0:6.3.7-1.el10_0.1 | Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-16524 | corrigé en 0:6.3.7-1.el10_0.1 | Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection | HIGH 7.8 | 0.7 % | ||
| CVE-2026-16313 | corrigé en 0:1.48-7.el10_0.2 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | HIGH 7.6 | 0.3 % | ||
| CVE-2026-16615 | corrigé en 0:0.9.1-11.el10_0.1 | Librest: weak random number generation in pkce implementation | MEDIUM 6.8 | 0.4 % | ||
| CVE-2026-15588 | corrigé en 0:2.80.4-4.el10_0.17 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-16118 | corrigé en 0:2.80.4-4.el10_0.18 | Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c | HIGH 7.1 | 0.2 % | ||
| CVE-2026-5674 | corrigé en 0:1.2.7-1.el10_0.1 | Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading | HIGH 8.8 | 0.2 % | ||
| CVE-2026-15711 | corrigé en 0:3.6.5-3.el10_0.17 | Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation | HIGH 7.5 | 0.7 % | ||
| CVE-2026-15709 | corrigé en 0:3.6.5-3.el10_0.17 | Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2026-59692 | corrigé en 0:1.24.11-3.el10_0.6 | Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback | HIGH 7.5 | 0.6 % | ||
| CVE-2026-59691 | corrigé en 0:1.24.11-3.el10_0.6 | Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer | HIGH 7.1 | 0.3 % | ||
| CVE-2026-11610 | | 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind | HIGH 8.8 | 0.5 % | ||
| CVE-2026-14476 | corrigé en 0:2.10.2-3.el10_0.5 | Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass | HIGH 8.0 | 0.7 % | ||
| CVE-2026-14474 | corrigé en 0:2.10.2-3.el10_0.5 | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-58016 | corrigé en 0:2.80.4-4.el10_0.10 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-58015 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | HIGH 7.5 | 0.8 % | ||
| CVE-2026-58014 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH 8.6 | 0.6 % | ||
| CVE-2026-58013 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58012 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58011 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | HIGH 7.5 | 0.5 % | ||
| CVE-2026-58010 | corrigé en 0:2.80.4-4.el10_0.17 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-14164 | corrigé en 0:3.7.7-5.el10_0.1 | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-12912 | corrigé en 0:4.6.0-6.el10_0.4 | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH 7.3 | 0.4 % | ||
| CVE-2026-55655 | corrigé en 0:9.9p1-7.el10_0.5 | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-55653 | corrigé en 0:9.9p1-7.el10_0.5 | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to clien… | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-56208 | corrigé en 0:140.13.0-1.el10_0 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | HIGH 7.6 | 0.6 % | ||
| CVE-2026-10649 | corrigé en 0:3.0.0-5.3.el10_0 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression | HIGH 8.6 | 0.6 % | ||
| CVE-2026-42014 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-52718 | corrigé en 0:1.24.11-3.el10_0.4 | Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-52722 | corrigé en 0:1.24.11-3.el10_0.4 | Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling | HIGH 7.1 | 0.4 % | ||
| CVE-2026-52720 | corrigé en 0:1.24.11-3.el10_0.4 | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb | HIGH 8.8 | 0.6 % | ||
| CVE-2026-53704 | corrigé en 0:1.24.11-1.el10_0.2 | Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser | HIGH 7.1 | 0.2 % | ||
| CVE-2026-53703 | corrigé en 0:1.24.11-1.el10_0.2 | Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser | HIGH 7.1 | 0.2 % | ||
| CVE-2026-53705 | corrigé en 0:1.24.11-1.el10_0.3 | Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow | HIGH 7.6 | 0.4 % | ||
| CVE-2026-52719 | corrigé en 0:1.24.11-3.el10_0.4 | Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder | HIGH 7.1 | 0.3 % | ||
| CVE-2026-11774 | | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow | HIGH 7.6 | 0.7 % | ||
| CVE-2026-6893 | corrigé en 0:105-4.el10_0.1 | Dracut: dracut: root code execution via dhcp options command injection | HIGH 7.5 | 1.3 % | ||
| CVE-2026-11837 | corrigé en 0:0.2.3-6.el10_0.2 | Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown | HIGH 7.3 | 0.2 % | ||
| CVE-2026-11788 | | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser | HIGH 7.5 | 0.6 % | ||
| CVE-2026-50263 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50262 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50264 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50261 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50260 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50259 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50258 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50257 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50256 | corrigé en 0:24.1.5-6.el10_0.1 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length m… | HIGH 7.8 | 0.2 % | ||
| CVE-2026-11332 | | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution | HIGH 7.8 | 0.2 % | ||
| CVE-2026-5419 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | LOW 3.7 | 0.5 % | ||
| CVE-2026-43958 | corrigé en 0:1.8.0-20.el10_0.1 | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service | HIGH 7.8 | 0.2 % | ||
| CVE-2026-10118 | corrigé en 0:24.02.0-7.el10_0.1 | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication | HIGH 7.8 | 0.3 % | ||
| CVE-2026-4408 | corrigé en 0:4.21.3-114.el10_0.1 | Samba: remote code execution in samr | CRITICAL 9.8 | 2.5 % | ||
| CVE-2026-1933 | corrigé en 0:4.21.3-114.el10_0.1 | Samba: missing access check on reparse point operations | HIGH 7.1 | 0.9 % | ||
| CVE-2026-2340 | corrigé en 0:4.21.3-114.el10_0.1 | Samba: vfs_worm does not block directory modification | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-3012 | corrigé en 0:4.21.3-114.el10_0.1 | Samba: group policy certificate enrollment uses http:// without validation | HIGH 8.0 | 0.3 % | ||
| CVE-2026-42015 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42013 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-5260 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-48864 | corrigé en 0:0.7.29-8.el10_0.1 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH 7.8 | 0.2 % | ||
| CVE-2026-4480 | corrigé en 0:4.21.3-114.el10_0.1 | Samba: samba: remote code execution in printing subsystem via unescaped job description | CRITICAL 9.8 | 14 % | ||
| CVE-2026-9149 | corrigé en 0:0.7.29-8.el10_0.1 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-9150 | corrigé en 0:0.7.29-8.el10_0.1 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-9064 | | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) | HIGH 7.5 | 0.8 % | ||
| CVE-2026-42009 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-4802 | corrigé en 0:334.2-1.el10_0 | Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui | HIGH 8.0 | 1.0 % | ||
| CVE-2026-42011 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-42010 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-34002 | corrigé en 0:24.1.5-6.el10_0 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-34000 | corrigé en 0:24.1.5-6.el10_0 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-33846 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33845 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3832 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response | LOW 3.7 | 0.8 % | ||
| CVE-2026-3833 | corrigé en 0:3.8.9-9.el10_0.19 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-34003 | corrigé en 0:24.1.5-6.el10_0 | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access | HIGH 7.8 | 0.3 % | ||
| CVE-2026-34001 | corrigé en 0:24.1.5-6.el10_0 | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption | HIGH 7.8 | 0.3 % | ||
| CVE-2026-33999 | corrigé en 0:24.1.5-6.el10_0 | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling | HIGH 7.8 | 0.4 % | ||
| CVE-2026-4878 | corrigé en 0:2.69-7.el10_0.1 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | HIGH 7.0 | 0.2 % | ||
| CVE-2026-4631 | corrigé en 0:334.1-3.el10_0 | Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection | CRITICAL 9.8 | 15 % | ||
| CVE-2026-35092 | corrigé en 0:3.1.9-1.el10_0.2 | Corosync: corosync: denial of service via integer overflow in join message validation | HIGH 7.5 | 1.0 % | ||
| CVE-2026-35091 | corrigé en 0:3.1.9-1.el10_0.2 | Corosync: corosync: denial of service and information disclosure via crafted udp packet | HIGH 8.2 | 0.9 % | ||
| CVE-2026-5201 | corrigé en 0:2.42.12-4.el10_0.4 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image | HIGH 7.5 | 1.1 % | ||
| CVE-2026-5119 | corrigé en 0:3.6.5-3.el10_0.15 | Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment | HIGH 8.2 | 0.3 % | ||
| CVE-2026-4948 | corrigé en 0:2.3.1-1.el10_0.1 | Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-4775 | corrigé en 0:4.6.0-6.el10_0.3 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing | HIGH 7.8 | 0.6 % | ||
| CVE-2026-4424 | corrigé en 0:3.7.7-5.el10_0 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | HIGH 7.5 | 1.3 % | ||
| CVE-2026-4271 | corrigé en 0:3.6.5-3.el10_0.15 | Libsoup: libsoup: denial of service via use-after-free in http/2 server | HIGH 7.5 | 0.9 % | ||
| CVE-2026-4111 | corrigé en 0:3.7.7-5.el10_0 | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive | HIGH 7.5 | 0.7 % | ||
| CVE-2026-26104 | corrigé en 0:2.10.90-5.el10_0.2 | Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-26103 | corrigé en 0:2.10.90-5.el10_0.2 | Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api | HIGH 7.1 | 0.1 % | ||
| CVE-2025-14905 | | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow | HIGH 7.2 | 1.3 % | ||
| CVE-2025-14831 | corrigé en 0:3.8.9-9.el10_0.17 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-1709 | corrigé en 0:7.12.1-2.el10_0.5 | Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication | CRITICAL 9.8 | 5.8 % | ||
| CVE-2026-1761 | corrigé en 0:3.6.5-3.el10_0.14 | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response | HIGH 8.6 | 1.1 % | ||
| CVE-2025-14242 | corrigé en 0:3.0.5-9.el10_0.1 | Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing | MEDIUM 6.5 | 0.8 % | ||
| CVE-2026-0719 | corrigé en 0:3.6.5-3.el10_0.14 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication | HIGH 8.6 | 0.6 % | ||
| CVE-2025-14523 | corrigé en 0:3.6.5-3.el10_0.11 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | HIGH 8.2 | 0.5 % | ||
| CVE-2025-14512 | corrigé en 0:2.80.4-4.el10_0.9 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-14087 | corrigé en 0:2.80.4-4.el10_0.9 | Glib: glib: buffer underflow in gvariant parser leads to heap corruption | CRITICAL 9.8 | 0.8 % | ||
| CVE-2025-13601 | corrigé en 0:2.80.4-4.el10_0.8 | Glib: integer overflow in in g_escape_uri_string() | HIGH 7.7 | 0.3 % | ||
| CVE-2025-13609 | corrigé en 0:7.12.1-2.el10_0.4 | Keylime: keylime: registrar allows identity takeover via duplicate uuid registration | HIGH 8.2 | 0.5 % | ||
| CVE-2025-61662 | corrigé en 1:2.12-15.el10_0.2 | Grub2: missing unregister call for gettext command may lead to use-after-free | HIGH 7.8 | 0.2 % | ||
| CVE-2025-59089 | corrigé en 0:1.0.0-19.el10_0 | Python-kdcproxy: remote dos via unbounded tcp upstream buffering | MEDIUM 5.9 | 0.6 % | ||
| CVE-2025-59088 | corrigé en 0:1.0.0-19.el10_0 | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv | HIGH 8.6 | 0.5 % | ||
| CVE-2025-12105 | corrigé en 0:3.6.5-3.el10_0.10 | Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion | HIGH 7.5 | 0.5 % | ||
| CVE-2025-10911 | corrigé en 0:1.1.39-8.el10_0.1 | Libxslt: use-after-free with key data stored cross-rvt | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-5987 | corrigé en 0:0.11.1-4.el10_0.1 | Libssh: invalid return code for chacha20 poly1305 with openssl backend | HIGH 8.1 | 1.7 % | ||
| CVE-2025-6020 | corrigé en 0:1.6.1-8.el10_0 | Linux-pam: linux-pam directory traversal | HIGH 7.8 | 0.5 % | ||
| CVE-2025-6170 | corrigé en 0:2.12.5-9.el10_0.2 | Libxml2: stack buffer overflow in xmllint interactive shell command handling | LOW 2.5 | 0.3 % | ||
| CVE-2023-52356 | corrigé en 0:4.6.0-6.el10_0.2 | Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service | HIGH 7.5 | 2.5 % | ||
| CVE-2023-52355 | corrigé en 0:4.6.0-6.el10_0.4 | Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom | HIGH 7.5 | 1.8 % |