Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Red Hat Enterprise Linux 10 — Vulnerabilities & Security Advisories 361

All 361 CVE vulnerabilities found in Red Hat Enterprise Linux 10, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Red Hat Enterprise Linux 10. It collects security advisories published by Red Hat covering this specific product version, spanning its entire support lifecycle. Readers can track the vendor's security responses, analyze specific weakness classes such as buffer overflows or privilege escalation, and review the product's complete vulnerability history.

Vendor: Red Hat

CVE ID Title CVSS Severity Published
CVE-2026-108093 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading CWE-476 5.5 Medium 2026-10-09
CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry CWE-476 5.5 Medium 2026-10-09
CVE-2026-107655 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service CWE-476 4.0 Medium 2026-10-09
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption CWE-1284 5.1 Medium 2026-10-08
CVE-2026-107466 Flatpak-builder: local file exfiltration via `file CWE-22 6.1 Medium 2026-10-08
CVE-2026-107161 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients CWE-122 7.5 High 2026-10-07
CVE-2026-106067 Gimp: gimp: heap buffer overflow in hot color filter on oversized image CWE-119 6.3 Medium 2026-10-07
CVE-2026-106066 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions CWE-119 6.3 Medium 2026-10-07
CVE-2026-106065 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions CWE-119 6.3 Medium 2026-10-07
CVE-2026-107169 M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8 CWE-476 6.2 Medium 2026-10-07
CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic() CWE-416 6.2 Medium 2026-10-07
CVE-2026-106064 Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions CWE-119 6.3 Medium 2026-10-07
CVE-2026-107170 M17n-lib: null dereference in minput_open_im() after failed m17n_init() CWE-476 2.9 Low 2026-10-07
CVE-2026-107168 M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars() CWE-835 6.2 Medium 2026-10-07
CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file CWE-125 5.5 Medium 2026-10-07
CVE-2026-80048 Sssd: sssd-kcm: local denial of service via excessive memory preallocation CWE-770 - - 2026-10-06
CVE-2026-104045 Sssd: sssd: denial of service via race condition in autofs responder CWE-772 4.7 Medium 2026-10-06
CVE-2026-104046 Sssd: sssd: denial of service via incomplete identity provider authentication requests CWE-770 6.2 Medium 2026-10-06
CVE-2026-106062 Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file CWE-119 7.8 High 2026-10-06
CVE-2026-101258 Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free CWE-787 7.8 High 2026-10-06
CVE-2026-106063 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions CWE-119 6.3 Medium 2026-10-06
CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation CWE-1025 6.8 Medium 2026-10-06
CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups CWE-140 5.3 Medium 2026-10-06
CVE-2026-88252 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion CWE-835 4.7 Medium 2026-10-06
CVE-2026-104044 Sssd: sssd: denial of service via crafted passkey kerberos authentication request CWE-476 6.2 Medium 2026-10-06
CVE-2026-104043 Sssd: sssd: denial of service via undersized packet parsing in nss responder CWE-125 5.5 Medium 2026-10-06
CVE-2026-104042 Sssd: sssd: denial of service via out-of-bounds read in pam responder CWE-125 5.5 Medium 2026-10-06
CVE-2026-104041 Sssd: sssd: denial of service via unbounded negative cache growth CWE-770 5.5 Medium 2026-10-06
CVE-2026-104040 Sssd: sssd: information disclosure via odata injection in entra id lookups CWE-140 4.4 Medium 2026-10-06
CVE-2026-104039 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder CWE-825 4.7 Medium 2026-10-06

All 361 known CVE vulnerabilities affecting Red Hat Enterprise Linux 10 with full Chinese analysis, references, and POCs where available.