Red hat enterprise linux 10.0 extended update support

This hub aggregates every CVE we track for Red hat enterprise linux 10.0 extended update support, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Red hat enterprise linux 10.0 extended update support.

• CVE-2026-42014Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin6.6Jun 16, 2026
• CVE-2026-5419Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal3.7Jun 1, 2026
• CVE-2026-10118Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication7.8Jun 1, 2026
• CVE-2026-4408Samba: remote code execution in samr9.0May 28, 2026
• CVE-2026-1933Samba: missing access check on reparse point operations7.1May 27, 2026
• CVE-2026-2340Samba: vfs_worm does not block directory modification6.5May 27, 2026
• CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validation8.0May 27, 2026
• CVE-2026-42013Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name8.2May 26, 2026
• CVE-2026-42015Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling5.3May 26, 2026
• CVE-2026-42012Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans7.1May 26, 2026
• CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchange8.2May 26, 2026
• CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job description9.0May 26, 2026
• CVE-2026-9064389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)7.5May 20, 2026
• CVE-2026-42009Gnutls: gnutls: denial of service via dtls packet reordering vulnerability7.5May 18, 2026
• CVE-2026-4802Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui8.0May 11, 2026