Red Hat Enterprise Linux 10.0

productDE

cpe:/o:redhat:enterprise_linux:10.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical11high5medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-12085US	—	8.64% (95th)	Exploit	no fix	2025-01-14	—
CVE-2024-12088US	high7.5	4.65% (92nd)	—	no fix	2025-01-14	—
CVE-2024-12087US	high7.5	2.26% (83rd)	—	no fix	2025-01-14	—
CVE-2024-12086US	medium6.8	1.79% (78th)	—	no fix	2025-01-14	—
CVE-2026-42033US	—	0.87% (59th)	—	no fix	2026-04-24	—
CVE-2026-42039US	high7.5	0.77% (55th)	—	no fix	2026-04-24	—
CVE-2026-42043US	critical10.0	0.71% (53rd)	—	no fix	2026-04-24	—
CVE-2026-27140US	high8.8OT elevated	0.66% (51st)	—	no fix	2026-04-08	—
CVE-2026-42041US	medium6.5	0.66% (51st)	—	no fix	2026-04-24	—
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	—
CVE-2026-32280US	—	0.61% (49th)	—	no fix	2026-04-08	—
CVE-2026-42044US	critical9.1	0.61% (49th)	—	no fix	2026-04-24	—
CVE-2025-69534US	high7.5	0.60% (49th)	—	no fix	2026-03-05	—
CVE-2025-59089US	—	0.56% (46th)	—	no fix	2025-11-12	—
CVE-2026-27143US	critical9.8	0.54% (45th)	—	no fix	2026-04-08	—
CVE-2025-59088US	—	0.49% (42nd)	—	no fix	2025-11-12	—
CVE-2026-40895US	high7.5	0.49% (42nd)	—	no fix	2026-04-21	—
CVE-2026-42035US	—	0.40% (34th)	—	no fix	2026-04-24	—
CVE-2026-41035US	high7.8	0.39% (33rd)	—	no fix	2026-04-16	—
CVE-2024-12747US	—	0.39% (32nd)	—	no fix	2025-01-14	—
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	—
CVE-2026-33810US	high8.2	0.34% (27th)	—	no fix	2026-04-08	—
CVE-2026-39373US	—	0.29% (22nd)	—	no fix	2026-04-07	—
CVE-2026-32282US	medium6.4	0.29% (22nd)	—	no fix	2026-04-08	—
CVE-2026-32289US	medium6.1	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-32288US	medium5.5	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-27144US	high7.1	0.26% (18th)	—	no fix	2026-04-08	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling5 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-390Detection of Error Condition Without Action4 CVEs
CWE-908Use of Uninitialized Resource4 CVEs
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes3 CVEs
CWE-295Improper Certificate Validation2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan