CVE 2026 document archive · 191

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 191 / 264

9501. CVE-2026-44168mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer→
9502. CVE-2026-44119httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges→
9503. CVE-2026-43964postfix: buffer over-read via malformed enhanced status code→
9504. CVE-2026-43961vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution→
9505. CVE-2026-43958rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service→
9506. CVE-2026-43951httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime→
9507. CVE-2026-43896jq: stack overflow in recursive object merge→
9508. CVE-2026-43895jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts→
9509. CVE-2026-43894jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow→
9510. CVE-2026-43870apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities→
9511. CVE-2026-43869Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation→
9512. CVE-2026-43864mutt: Mutt: Denial of Service via null pointer dereference in show_sig_summary→
9513. CVE-2026-43863mutt: Mutt: Remote Denial of Service via crafted input→
9514. CVE-2026-43862mutt: Mutt: Security bypass due to mishandled IMAP authentication→
9515. CVE-2026-43861mutt: Mutt: URL processing vulnerability due to improper null character handling→
9516. CVE-2026-43860mutt: mutt: Authentication bypass due to IMAP CRAM-MD5 hash truncation→
9517. CVE-2026-43859mutt: Mutt: Low integrity impact in IMAP authentication due to cryptographic digest mishandling→
9518. CVE-2026-43804webkitgtk: Visiting a website may lead to an app denial-of-service→
9519. CVE-2026-43795webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
9520. CVE-2026-43794webkitgtk: Processing maliciously crafted web content may lead to memory corruption→
9521. CVE-2026-43745webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9522. CVE-2026-43742webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9523. CVE-2026-43740webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory→
9524. CVE-2026-43734webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9525. CVE-2026-43732webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information→
9526. CVE-2026-43731webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption→
9527. CVE-2026-43727webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9528. CVE-2026-43726webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9529. CVE-2026-43725webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox→
9530. CVE-2026-43721webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data→
9531. CVE-2026-43720webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9532. CVE-2026-43716webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9533. CVE-2026-43715webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption→
9534. CVE-2026-43713webkitgtk: webkitgtk: Visiting a website may leak sensitive data→
9535. CVE-2026-43712webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9536. CVE-2026-43707webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9537. CVE-2026-43705webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption→
9538. CVE-2026-43701webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox→
9539. CVE-2026-43699webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9540. CVE-2026-43676webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9541. CVE-2026-43663webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash→
9542. CVE-2026-43660webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced→
9543. CVE-2026-43658webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
9544. CVE-2026-43620rsync: rsync: Remote Denial of Service via Out-of-bounds Read→
9545. CVE-2026-43619rsync: rsync: Symlink race vulnerability allows unauthorized file operations→
9546. CVE-2026-43618rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding→
9547. CVE-2026-43617rsync: rsync: Hostname-based ACL bypass in daemon chroot configuration→
9548. CVE-2026-43515tomcat-coyote: tomcat: Improper Authorization allows security bypass→
9549. CVE-2026-43514tomcat: Apache Tomcat: Information disclosure via AJP secret timing discrepancy→
9550. CVE-2026-43513tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm→