PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 10

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,153 documents · Identifier year 2026 · 10 / 264

  1. CVE-2026-109968clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable file
  2. CVE-2026-109964ImageMagick: ImageMagick: Arbitrary code execution via crafted PICT image
  3. CVE-2026-109953freerdp: FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
  4. CVE-2026-109952freerdp: FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
  5. CVE-2026-109951freerdp: FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
  6. CVE-2026-109950freerdp: FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
  7. CVE-2026-109949freerdp: FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
  8. CVE-2026-109948freerdp: FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
  9. CVE-2026-109947freerdp: FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
  10. CVE-2026-109946freerdp: FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
  11. CVE-2026-109945freerdp: FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit
  12. CVE-2026-109944freerdp: FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
  13. CVE-2026-109943freerdp: FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
  14. CVE-2026-109942freerdp: FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet
  15. CVE-2026-109941freerdp: FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
  16. CVE-2026-109940freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name
  17. CVE-2026-109939freerdp: FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order
  18. CVE-2026-109938freerdp: FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update
  19. CVE-2026-109932undici: undici: Denial of Service via unbounded WebSocket PONG buffering
  20. CVE-2026-109924undici: undici: Denial of Service via memory exhaustion in EventSource client
  21. CVE-2026-109869undici: undici: Denial of Service via unhandled stream error on excessive content encodings
  22. CVE-2026-109855undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake
  23. CVE-2026-109854m17n-lib: Uninitialized stack read in ISO-2022 Compound Text UTF-8 decoding
  24. CVE-2026-109841undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens
  25. CVE-2026-109833gnome-remote-desktop: Heap buffer overflow in gnome-remote-desktop VNC TLS peek buffer handling allows remote denial of service
  26. CVE-2026-109832gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED)
  27. CVE-2026-109829undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching
  28. CVE-2026-109828libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsing
  29. CVE-2026-109783firefox: Mitigation bypass in the File Handling component
  30. CVE-2026-109782firefox: Mitigation bypass in the File Handling component
  31. CVE-2026-109781firefox: Denial-of-service in the Printing: Output component
  32. CVE-2026-109780firefox: Mitigation bypass in the DOM: Core & HTML component
  33. CVE-2026-109779firefox: Race condition in the Networking: DNS component
  34. CVE-2026-109778firefox: Privilege escalation in the WebExtensions component
  35. CVE-2026-109777firefox: Information disclosure in the Storage: IndexedDB component
  36. CVE-2026-109776firefox: Race condition in the XPCOM component
  37. CVE-2026-109775firefox: Denial-of-service in the WebRTC component
  38. CVE-2026-109774firefox: Invalid pointer, undefined behavior in the DOM: Notifications component
  39. CVE-2026-109773firefox: Denial-of-service in the Sync component
  40. CVE-2026-109772firefox: Same-origin policy bypass in the DevTools component
  41. CVE-2026-109771firefox: Information disclosure in the WebRTC: Networking component
  42. CVE-2026-109770firefox: Spoofing issue in the DOM: Web Serial component
  43. CVE-2026-109769firefox: Information disclosure in the Networking: Cache component
  44. CVE-2026-109768firefox: Denial-of-service in the Site Reports component
  45. CVE-2026-109767firefox: Information disclosure in the Networking component
  46. CVE-2026-109766firefox: Mitigation bypass in the Enterprise Policies component
  47. CVE-2026-109765firefox: Race condition, use-after-free in the Graphics: Text component
  48. CVE-2026-109764firefox: Mitigation bypass in the Enterprise Policies component
  49. CVE-2026-109763firefox: Mitigation bypass in the File Handling component
  50. CVE-2026-109762firefox: Incorrect boundary conditions in the SVG component
CVE 2026 document archive — Page 10 | PulseLinux