CVE 2026 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,088 documents · Identifier year 2026 · 1 / 262

1. CVE-2026-121412freerdp: freerdp: Denial of Service via uncontrolled proxy memory consumption during DVC reassembly→
2. CVE-2026-121409freerdp: freerdp: Denial of Service via oversized X.224 routing token→
3. CVE-2026-121407freerdp: freerdp: Denial of Service via malformed remdesk channel payload→
4. CVE-2026-121405freerdp: FreeRDP: Denial of Service via excessive memory allocation in serial device redirection→
5. CVE-2026-121399freerdp: FreeRDP: Denial of service via excessive memory allocation in RD Gateway packet handling→
6. CVE-2026-121397freerdp: freerdp: Information disclosure via heap buffer over-read in clipboard image conversion→
7. CVE-2026-121395freerdp: FreeRDP: Denial of Service via RemoteFX differential decoder assertion failure→
8. CVE-2026-121393freerdp: freerdp: Denial of Service via crafted RemoteFX region coordinates→
9. CVE-2026-121389freerdp: FreeRDP: Denial of Service via malformed RDPDR device announcement→
10. CVE-2026-121386freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads→
11. CVE-2026-121259gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in JPEG 2000 decimator→
12. CVE-2026-120831libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service→
13. CVE-2026-120830libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure→
14. CVE-2026-120740hivex: hivex: Denial of Service via out-of-bounds read in big-data block processing→
15. CVE-2026-120651perl-cgi: perl-cgi: Denial of Service via truncated request body→
16. CVE-2026-120650perl-cgi: perl-cgi: Denial of Service via unenforced request and upload limits→
17. CVE-2026-120648perl-CGI: perl-CGI: HTML injection via unescaped comment delimiter→
18. CVE-2026-120647perl-cgi: perl-cgi: Content-Disposition parameter injection via unescaped double quotes in attachment filenames→
19. CVE-2026-120646perl-cgi: perl-cgi: Denial of Service via improper argument handling in uploadInfo→
20. CVE-2026-120645perl-cgi: perl-cgi: Denial of Service via unescaped regular expression injection in scrolling_list→
21. CVE-2026-120644perl-cgi: perl-cgi: Cookie attribute injection via unvalidated parameters→
22. CVE-2026-120643perl-CGI: perl-CGI: Cross-site scripting via unescaped apostrophes in generated URLs→
23. CVE-2026-120642perl-cgi: perl-cgi: Security feature bypass via untainted request parameters→
24. CVE-2026-120641perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames→
25. CVE-2026-120640perl-cgi: perl-cgi: Request forgery via request body parameter spoofing→
26. CVE-2026-120639perl-cgi: perl-cgi: HTTP header injection via improper newline validation→
27. CVE-2026-120638perl-cgi: perl-cgi: Open redirect via HTML entity decoding in redirect function→
28. CVE-2026-120637perl-cgi: perl-cgi: Parameter injection via unrecognized HTTP request method→
29. CVE-2026-120636perl-cgi: perl-cgi: script injection via unvalidated request URI→
30. CVE-2026-120635perl-CGI: perl-CGI: Security control bypass via improper multipart parsing→
31. CVE-2026-120634perl-cgi: perl-cgi: Information disclosure via uncleared warning buffer in persistent environments→
32. CVE-2026-120633perl-CGI: perl-CGI: Web cache poisoning and URL manipulation via untrusted host headers→
33. CVE-2026-120632perl-CGI: perl-CGI: Denial of Service via crafted multipart/related Content-Type header→
34. CVE-2026-120631perl-cgi: perl-cgi: Denial of Service via unescaped cookie expiration attribute→
35. CVE-2026-120572firefox: Incorrect boundary conditions in the Layout: Block and Inline component→
36. CVE-2026-120457libaec: libaec: Denial of Service via out-of-bounds read in m_se_decode()→
37. CVE-2026-120452libgphoto2: libgphoto2: Denial of service via oversized thumbnail processing→
38. CVE-2026-120437netpbm: netpbm: Denial of Service via out-of-bounds read in tgatoppm→
39. CVE-2026-120436netpbm: netpbm: Arbitrary code execution via integer overflow in jbigtopnm→
40. CVE-2026-120433netpbm: netpbm: Arbitrary code execution via crafted PICT file in picttoppm→
41. CVE-2026-120432netpbm: netpbm: Arbitrary code execution via integer overflow in winicontopam→
42. CVE-2026-120194json-glib: json-glib: infinite loop in json_path_query() with negative JSONPath slice step→
43. CVE-2026-120067postgresql-odbc: postgresql-odbc: Denial of Service via stack-based buffer overflow in updatable cursors→
44. CVE-2026-120066postgresql-odbc: postgresql-odbc: Information disclosure via insecure temporary log file creation→
45. CVE-2026-120065postgresql-odbc: postgresql-odbc: SQL injection via unescaped column names in updatable cursors→
46. CVE-2026-120062postgresql-odbc: postgresql-odbc: arbitrary SQL execution via unescaped input in SQLSpecialColumns→
47. CVE-2026-120061postgresql-odbc: postgresql-odbc: Memory corruption via malformed SQL escape sequences→
48. CVE-2026-120059postgresql-odbc: postgresql-odbc: Information disclosure via format string in column name→
49. CVE-2026-120058postgresql-odbc: postgresql-odbc: Arbitrary code execution via heap buffer overflow during cursor fetch→
50. CVE-2026-120057postgresql-odbc: postgresql-odbc: arbitrary code execution via buffer overflow in large-object read→