PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,153 documents · Identifier year 2026 · 13 / 264

  1. CVE-2026-109253freerdp: freerdp: Denial of Service via out-of-bounds read in RDPEAR
  2. CVE-2026-109252freerdp: freerdp: Denial of Service via truncated authentication data
  3. CVE-2026-109251freerdp: FreeRDP: Denial of Service via invalid video geometry coordinates
  4. CVE-2026-109250freerdp: FreeRDP: arbitrary code execution via heap buffer overflow during smartcard key enumeration
  5. CVE-2026-109249freerdp: FreeRDP: Denial of Service via crafted Remote Assistance file
  6. CVE-2026-109248freerdp: freerdp: Denial of Service via heap out-of-bounds read in clipboard handling
  7. CVE-2026-109247freerdp: freerdp: Information disclosure via clipboard path traversal
  8. CVE-2026-109246freerdp: freerdp: Denial of Service via divide-by-zero error in shadow server
  9. CVE-2026-109245freerdp: freerdp: Information disclosure via improper TLS certificate validation
  10. CVE-2026-109244freerdp: freerdp: Information disclosure via insecure file permissions in winpr-makecert
  11. CVE-2026-109243freerdp: freerdp: Information disclosure via insecure private key permissions
  12. CVE-2026-109242freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling
  13. CVE-2026-109241freerdp: freerdp: Denial of Service via NULL pointer dereference in video redirection channel
  14. CVE-2026-109240freerdp: freerdp: Denial of Service via unvalidated buffer size in USB redirection
  15. CVE-2026-109090libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
  16. CVE-2026-109089libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow
  17. CVE-2026-109088libXtst: libXtst: Denial of Service via malformed RECORD EnableContext replies
  18. CVE-2026-108976emacs: zero-click local command execution via TRAMP
  19. CVE-2026-108858lorax: lorax: Information disclosure via API token logging
  20. CVE-2026-108693ImageMagick: ImageMagick: Arbitrary code execution via insecure search path
  21. CVE-2026-108573assimp: assimp: Denial of Service via out-of-bounds read in PLY file handler
  22. CVE-2026-108518perl-DBI: perl-dbi: Denial of Service via type confusion in dbi_profile
  23. CVE-2026-108094mutter: mutter: client-triggered use-after-free in Wayland color-management ICC image description path
  24. CVE-2026-108093GIMP: gimp: Denial of service via NULL pointer dereference in XCF simulation parasite loading
  25. CVE-2026-108063libhangul: NULL pointer dereference in hanja_new() when looking up a malformed Hanja dictionary entry
  26. CVE-2026-107935gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
  27. CVE-2026-107929curl: curl: local interface connection reuse mixup
  28. CVE-2026-107928curl: curl: info leak uploading over WebSockets with GnuTLS
  29. CVE-2026-107890cups: cups: Denial of Service via repeated IPP group tags
  30. CVE-2026-107888cups: CUPS: Denial of Service via deleted temporary printer
  31. CVE-2026-107886cups: cups: Denial of Service via double-free in printer class management
  32. CVE-2026-107885cups: cups: Denial of Service via improper job submission timeout handling
  33. CVE-2026-107823mariadb: mariadb: Privilege escalation via unescaped newlines in view parser
  34. CVE-2026-107822mariadb: MariaDB: Privilege escalation via ACL cache key collision
  35. CVE-2026-107821mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
  36. CVE-2026-107819mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verification
  37. CVE-2026-107818mariadb: mariadb: Privilege escalation via environment variable injection during service restart
  38. CVE-2026-107817mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin
  39. CVE-2026-107816mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin
  40. CVE-2026-107815mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write
  41. CVE-2026-107814mariadb: mariadb: Arbitrary code execution via insecure service account home directory
  42. CVE-2026-107778krb5: krb5: Denial of Service via crafted forwarded credentials
  43. CVE-2026-107726com.hazelcast/hazelcast: Hazelcast: Arbitrary member memory access by low-privileged client
  44. CVE-2026-107725com.hazelcast/hazelcast: Hazelcast: arbitrary code execution via missing authorization checks in IMap Predicates API
  45. CVE-2026-107718http-server: http-server: Open redirect via unencoded route parameters
  46. CVE-2026-107708krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
  47. CVE-2026-107705poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption
  48. CVE-2026-107655cups: NULL pointer dereference via embedded job ticket comments allows remote denial of service
  49. CVE-2026-107651eog: eog: arbitrary code execution via heap buffer overflow in PNG metadata reader
  50. CVE-2026-107570mutt: mutt: Memory corruption via crafted Content-Type header in email template
CVE 2026 document archive — Page 13 | PulseLinux