CVE 2026 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,088 documents · Identifier year 2026 · 2 / 262

51. CVE-2026-119843gst-plugins-good: gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags→
52. CVE-2026-119842gst-plugins-base: gst-plugins-base: NULL-pointer dereference in mDVDsub subtitle parser via missing closing-brace check→
53. CVE-2026-119777gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in H.266/VVC parser→
54. CVE-2026-119729gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: Integer overflow in AV1 LEB128 parser allows denial of service→
55. CVE-2026-119728gst-plugins-bad: gst-plugins-bad: NULL pointer dereference in H.264 MVC SPS cleanup during parse failure→
56. CVE-2026-119727gst-plugins-bad: gst-plugins-bad: H.265 SPS SCC palette predictor array overflow via integer underflow in bounds computation→
57. CVE-2026-119602libmspack: libmspack: Information disclosure via unchecked back-references in MS-ZIP decompressor→
58. CVE-2026-119591sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()→
59. CVE-2026-119586sqlite: sqlite: Arbitrary command execution via .recover command→
60. CVE-2026-119567vsftpd: vsftpd: access control bypass via RFC 775 command aliases→
61. CVE-2026-119566github.com/prometheus/common: Prometheus: Information disclosure via HTTP redirects in remote write requests→
62. CVE-2026-119528gimp: gimp: stack buffer overflow in PSD image resource header loader→
63. CVE-2026-119378sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension→
64. CVE-2026-119373sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5→
65. CVE-2026-119341tesseract: tesseract: Denial of service via crafted template files→
66. CVE-2026-119340tesseract: tesseract: Denial of Service via crafted traineddata file→
67. CVE-2026-119339tesseract: Tesseract: Denial of service via crafted trained model file→
68. CVE-2026-119338tesseract: tesseract: Denial of Service via crafted right-to-left text rendering→
69. CVE-2026-119281org.mariadb.jdbc/mariadb-java-client: mariadb-connector-j: Security feature bypass via unvalidated character set changes→
70. CVE-2026-119280org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via unvalidated lengths during XA recovery→
71. CVE-2026-119279org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via integer truncation in length handling→
72. CVE-2026-119278org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via malformed authentication response→
73. CVE-2026-119277org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via unvalidated packet lengths→
74. CVE-2026-119276org.mariadb.jdbc/mariadb-java-client: mariadb-java-client: Denial of Service via uncontrolled memory allocation→
75. CVE-2026-119271chromium-browser: skia: Use after free in Skia→
76. CVE-2026-119261chromium-browser: skia: Improper input validation in Skia→
77. CVE-2026-119210org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information disclosure via bypass of local file validation→
78. CVE-2026-119197pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding→
79. CVE-2026-119196pyasn1: pyasn1: Denial of Service via constructed bit string decoding→
80. CVE-2026-119195pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data→
81. CVE-2026-119194pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding→
82. CVE-2026-119189node-forge: node-forge: Certificate validation bypass via unenforced path length constraints→
83. CVE-2026-119188node-forge: node-forge: Denial of Service via interleaved record during fragmented TLS handshake→
84. CVE-2026-119187node-forge: node-forge: Denial of Service via call stack exhaustion in TLS record processing→
85. CVE-2026-119124ImageMagick: ImageMagick: Denial of service via heap-based buffer overflow in -morph option→
86. CVE-2026-119123ImageMagick: ImageMagick: Denial of Service via stack overflow in TIFF decoder→
87. CVE-2026-119025open: open: Arbitrary code execution via crafted URLs→
88. CVE-2026-118773glob: glob: Denial of Service (DoS) via incomplete traversal cancellation→
89. CVE-2026-118772joi: joi: Denial of Service via inefficient regular expression in email validation→
90. CVE-2026-118769botan: Botan: Integer overflow when reporting block size in FFI can cause memory corruption→
91. CVE-2026-118764minimatch: minimatch: Denial of Service via crafted glob pattern expansion→
92. CVE-2026-118681github.com/go-chi/chi: chi: Authentication bypass via SuppressNotFound middleware→
93. CVE-2026-118669oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers→
94. CVE-2026-118664decode-uri-component: decode-uri-component: Denial of Service via malformed percent-encoded input→
95. CVE-2026-118593kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for CVE-2026-46099)→
96. CVE-2026-118475eog: Eye Of Gnome: buffer overrun when parsing malicious PNG files with non-standard iCCP chunk→
97. CVE-2026-118384mtools: mtools: Denial of Service via out-of-bounds write in VFAT parsing→
98. CVE-2026-118354chromium-browser: skia: Improper input validation in Skia→
99. CVE-2026-118351chromium-browser: skia: Memory corruption in Skia→
100. CVE-2026-118348chromium-browser: skia: Improper input validation in Skia→