PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 189

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 189 / 264

  1. CVE-2026-45836kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
  2. CVE-2026-45835kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
  3. CVE-2026-45834kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
  4. CVE-2026-45822decode-uri-component: decode-uri-component: Denial of Service via crafted input
  5. CVE-2026-45820fflate: fflate: Denial of Service via crafted ZIP archives
  6. CVE-2026-45819baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling
  7. CVE-2026-45740protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
  8. CVE-2026-45736ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
  9. CVE-2026-45700freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution
  10. CVE-2026-45696OpenEXR: OpenEXR: Denial of Service and potential information disclosure via crafted EXR file
  11. CVE-2026-45664ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder
  12. CVE-2026-45624ImageMagick: ImageMagick: Data exposure due to image processing vulnerability
  13. CVE-2026-45623postcss: PostCSS: Information disclosure and denial of service via crafted CSS input
  14. CVE-2026-45591dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption
  15. CVE-2026-45505activemq: Apache ActiveMQ: Arbitrary Code Execution via crafted discovery URI bypass
  16. CVE-2026-45491dotnet: .NET: Local file tampering via link following vulnerability
  17. CVE-2026-45490dotnet: .NET SDK workload elevate: arbitrary file creation/truncation via LogFile named pipe.
  18. CVE-2026-45447openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
  19. CVE-2026-45446openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
  20. CVE-2026-45445openssl: AES-OCB IV Ignored on EVP_Cipher() Path
  21. CVE-2026-45409python-idna: idna: Denial of Service via specially crafted long inputs
  22. CVE-2026-45359ImageMagick: ImageMagick: Information Disclosure via Invalid Connected-Components Value
  23. CVE-2026-45358Magick.NET-Q16-AnyCPU: Magick.NET-Q16-HDRI-AnyCPU: Magick.NET-Q16-HDRI-OpenMP-arm64: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q16-HDRI-arm64: Magick.NET-Q16-HDRI-x64: Magick.NET-Q16-HDRI-x86: Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-arm64: Magick.NET-Q16-x64: Magick.NET-Q16-x86: Magick.NET-Q8-AnyCPU: Magick.NET-Q8-OpenMP-arm64: Magick.NET-Q8-OpenMP-x64: Magick.NET-Q8-arm64: Magick.NET-Q8-x64: Magick.NET-Q8-x86: ImageMagick: Information disclosure due to an out-of-bounds read in the meta encoder
  24. CVE-2026-45287go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak
  25. CVE-2026-45232rsync: Rsync: Denial of Service via malformed HTTP proxy response
  26. CVE-2026-45205commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
  27. CVE-2026-45191perl-Net-CIDR-Lite: Net::CIDR::Lite: IP ACL bypass due to improper CIDR mask validation
  28. CVE-2026-45190Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation
  29. CVE-2026-45186libexpat: denial of service via crafted XML input
  30. CVE-2026-45149brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges
  31. CVE-2026-45130vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service
  32. CVE-2026-45109next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack
  33. CVE-2026-45031ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder
  34. CVE-2026-44967opentelemetry-: opentelemetry-cpp: Denial of Service via unbounded HTTP response read
  35. CVE-2026-44950libxfont2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
  36. CVE-2026-44944open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket
  37. CVE-2026-44943open-iscsi: open-iscsi: Privilege Escalation via Path Traversal
  38. CVE-2026-44928uriparser: uriparser: Incorrect URI comparison leading to integrity issues
  39. CVE-2026-44927uriparser: uriparser: Data integrity issue due to pointer truncation
  40. CVE-2026-44889webob: python-webob: WebOb: Open Redirect vulnerability via HTTP Location header normalization
  41. CVE-2026-44777jq: stack overflow in module loading on mutual include
  42. CVE-2026-44740github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation
  43. CVE-2026-44705tmp: path Traversal via unsanitized prefix/postfix enables directory escape
  44. CVE-2026-44690unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes
  45. CVE-2026-44687unbound: Unbound: Denial of Service due to 'harden-below-nxdomain' logic bypass
  46. CVE-2026-44673libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob
  47. CVE-2026-44663OpenEXR: OpenEXR: Denial of Service via crafted HTJ2K-compressed EXR file
  48. CVE-2026-44656vim: Vim: Arbitrary command execution via :find command-line completion
  49. CVE-2026-44631httpd: Apache HTTP Server: Denial of Service via crafted regular expressions
  50. CVE-2026-44621libunbound: libunbound: Denial of Service via specially crafted network traffic
CVE 2026 document archive — Page 189 | PulseLinux