CVE 2026 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,153 documents · Identifier year 2026 · 12 / 264

551. CVE-2026-109710firefox: thunderbird: Use-after-free in the Graphics: Text component→
552. CVE-2026-109709firefox: Information disclosure, privilege escalation in the Security: Process Sandboxing component→
553. CVE-2026-109708firefox: Sandbox escape due to incorrect boundary conditions in the Networking component→
554. CVE-2026-109707firefox: Sandbox escape due to use-after-free in the Networking component→
555. CVE-2026-109706firefox: Use-after-free in the Storage: IndexedDB component→
556. CVE-2026-109705firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component→
557. CVE-2026-109704firefox: thunderbird: Privilege escalation in the Application Update component→
558. CVE-2026-109680freerdp: FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username→
559. CVE-2026-109679freerdp: FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response→
560. CVE-2026-109678freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA→
561. CVE-2026-109677freerdp: FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler→
562. CVE-2026-109676freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect→
563. CVE-2026-109619php: fatal error handling retains stale request state leading to use-after-free→
564. CVE-2026-109618php: OOM bailout during request parsing leads to memory corruption and RCE→
565. CVE-2026-109561goose: goose: Authorization bypass via uncleared read-only tool annotations→
566. CVE-2026-109448postgresql-odbc: postgresql-odbc: Denial of Service via integer wraparound in SQLBindParameter→
567. CVE-2026-109411samba: Access control bypass via vfs_ceph_rgw case-insensitive open→
568. CVE-2026-109383undici: undici: Certificate validation bypass via dropped TLS options in Agent→
569. CVE-2026-109380modern-tar: modern-tar: Denial of Service via memory exhaustion from crafted archives→
570. CVE-2026-109351gix-pack: gix-pack: Denial of Service via crafted pack-header object count→
571. CVE-2026-109350gix-pack: gix-pack: Denial of Service via malformed packfile delta entries→
572. CVE-2026-109349gix-pack: gix-pack: Denial of Service via crafted pack header→
573. CVE-2026-109282ImageMagick: ImageMagick: Denial of Service via type confusion in INFO, JSON, and YAML encoders→
574. CVE-2026-109281ImageMagick: ImageMagick: Information disclosure via crafted -fx expression→
575. CVE-2026-109280ImageMagick: ImageMagick: Denial of Service via use-after-free in -fx option→
576. CVE-2026-109279ImageMagick: ImageMagick: Denial of Service via race condition during security policy access→
577. CVE-2026-109278ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation→
578. CVE-2026-109277ImageMagick: ImageMagick: Security policy bypass via -script operation→
579. CVE-2026-109276ImageMagick: ImageMagick: Denial of Service via temporary file leak in JNG decoder→
580. CVE-2026-109275ImageMagick: ImageMagick: Code injection via crafted MVG file→
581. CVE-2026-109274ImageMagick: ImageMagick: Security policy bypass via TOCTOU symlink race condition→
582. CVE-2026-109273ImageMagick: ImageMagick: Information disclosure via crafted PostScript file→
583. CVE-2026-109272ImageMagick: ImageMagick: Denial of Service via crafted PostScript file→
584. CVE-2026-109271ImageMagick: ImageMagick: Denial of service via use-after-free in the WBINFO decoder→
585. CVE-2026-109270ImageMagick: ImageMagick: Denial of Service via memory leak in the -process option→
586. CVE-2026-109269ImageMagick: ImageMagick: Information disclosure via crafted JPEG file→
587. CVE-2026-109268ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer→
588. CVE-2026-109267ImageMagick: ImageMagick: Denial of Service via stack overflow in MSL decoder→
589. CVE-2026-109265ImageMagick: ImageMagick: Denial of Service via malformed XMP profile→
590. CVE-2026-109264ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder→
591. CVE-2026-109263ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder→
592. CVE-2026-109262ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder→
593. CVE-2026-109261ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder→
594. CVE-2026-109260ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder→
595. CVE-2026-109259ImageMagick: ImageMagick: Information disclosure via crafted TGA image→
596. CVE-2026-109258ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation→
597. CVE-2026-109257freerdp: freerdp: Denial of Service via double-free in NSCodec→
598. CVE-2026-109256freerdp: FreeRDP: Denial of Service via heap buffer overflow during clipboard image conversion→
599. CVE-2026-109255freerdp: freerdp: Arbitrary code execution via integer truncation in license stream validation→
600. CVE-2026-109254freerdp: freerdp: Denial of Service via use-after-free during audio channel disconnect→