PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 17 / 264

  1. CVE-2026-102829simple-git: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
  2. CVE-2026-102828simple-git: simple-git unsafe-operation guard does not block trailer command configuration
  3. CVE-2026-102827simple-git: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
  4. CVE-2026-102826simple-git: simple-git allows command execution through unblocked Git configuration includes
  5. CVE-2026-102635ImageMagick: ImageMagick: Information disclosure via crafted GIF file
  6. CVE-2026-102633expat: expat: Denial of Service via integer overflow in expat_realloc
  7. CVE-2026-102621poppler: poppler: Denial of Service via integer overflow in SplashClip
  8. CVE-2026-102620poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
  9. CVE-2026-102560libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth
  10. CVE-2026-102559libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
  11. CVE-2026-102558libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth
  12. CVE-2026-102557libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly
  13. CVE-2026-102556libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion
  14. CVE-2026-102555libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding
  15. CVE-2026-102554com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization
  16. CVE-2026-102422shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
  17. CVE-2026-102342ammonia: ammonia: Stored cross-site scripting via SVG animation elements
  18. CVE-2026-102331chromium-browser: angle: chromium-browser: arbitrary code execution via buffer overflow in ANGLE
  19. CVE-2026-102325chromium-browser: skia: chromium-browser: Uninitialized resource in Skia
  20. CVE-2026-102313chromium-browser: angle: chromium-browser: Information disclosure via uninitialized resource in ANGLE
  21. CVE-2026-102282adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives
  22. CVE-2026-102278brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns
  23. CVE-2026-102277brace-expansion: brace-expansion: Denial of Service via crafted brace patterns
  24. CVE-2026-102276brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns
  25. CVE-2026-102275pyjwt: PyJWT: Token verification bypass via mismatched OKP key components
  26. CVE-2026-102274pyjwt: pyjwt: Denial of Service via malformed RSA key in JWK set
  27. CVE-2026-102273pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets
  28. CVE-2026-102272pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling
  29. CVE-2026-102271pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
  30. CVE-2026-102270pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_format
  31. CVE-2026-102269pyjwt: PyJWT: Token revocation bypass via non-canonical signature decoding
  32. CVE-2026-102268pyjwt: PyJWT: Authentication bypass via improper public key validation
  33. CVE-2026-102267pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects
  34. CVE-2026-102266pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance
  35. CVE-2026-102265pyjwt: pyjwt: Denial of Service via deeply nested token headers
  36. CVE-2026-102253iperf3: iperf3: Denial of Service via UDP receive worker infinite loop
  37. CVE-2026-102010gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if
  38. CVE-2026-101918pyjwt: PyJWT: Denial of Service via deeply nested JSON token payload
  39. CVE-2026-101917pyjwt: PyJWT: Denial of Service via outbound request amplification on unknown key identifiers
  40. CVE-2026-101911ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing
  41. CVE-2026-101806mysql-connector-odbc: MySQL Connector/ODBC: Unauthorized data access and modification
  42. CVE-2026-101804mysql-connector-odbc: MySQL Connector/ODBC: Partial denial of service
  43. CVE-2026-101803mysql: mysql: unauthorized data modification via XML component
  44. CVE-2026-101802mysql: mysql: Denial of Service via the Server Parser
  45. CVE-2026-101801mysql: mysql: Denial of Service in Server Optimizer
  46. CVE-2026-101800mysql: mysql: unauthorized data access via improper privilege controls
  47. CVE-2026-101799mysql: mysql: Denial of Service via Group Replication GCS
  48. CVE-2026-101798mysql: mysql: Denial of Service in the server optimizer
  49. CVE-2026-101797mysql: mysql: system takeover via mysqldump component
  50. CVE-2026-101796mysql: mysql: Complete server takeover via replication component
CVE 2026 document archive — Page 17 | PulseLinux