CVE Tools
Track your stack

Red Hat Enterprise Linux 10.0 Extended Update Support

171 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Enterprise Linux 10.0 Extended Update Support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Enterprise Linux 10.0 Extended Update Support CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Enterprise Linux 10.0 Extended Update Support CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-062
2025-071
2025-080
2025-091
2025-101
2025-115
2025-123
2026-012
2026-026
2026-037
2026-0410
2026-0520
2026-0638
2026-0721
2026-0821
2026-0930
2026-101
2026-110

Severity

How the 171 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical74%
  • High12271%
  • Medium3923%
  • Low32%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Enterprise Linux 10.0 Extended Update Support.

  1. CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8
  2. CVE-2026-102560Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth8.6
  3. CVE-2026-102559Libsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6
  4. CVE-2026-102558Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6
  5. CVE-2026-102555Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding8.2
  6. CVE-2026-102557Libsoup: libsoup: heap buffer overflow during websocket message reassembly8.6
  7. CVE-2026-102556Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6
  8. CVE-2026-97024Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc7.1
  9. CVE-2026-97023Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin7.1
  10. CVE-2026-96280Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems7.5
  11. CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entities7.8
  12. CVE-2026-96275Flatpak: flatpak: arbitrary write access as root via extra-data extraction8.8
  13. CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization7.8
  14. CVE-2026-80110Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint8.1
  15. CVE-2026-89058Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config7.4

Product grouping is registry-driven, with AI assist and human review. How it works