CVE 2026 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 20 / 264

951. CVE-2026-100803firefox: thunderbird: Same-origin policy bypass in the WebExtensions component→
952. CVE-2026-100802firefox: Uninitialized memory in the Graphics: WebGPU component→
953. CVE-2026-100801firefox: thunderbird: Privilege escalation in the DLL Services component→
954. CVE-2026-100800firefox: Sandbox escape due to use-after-free in the Disability Access APIs component→
955. CVE-2026-100799firefox: Uninitialized memory in the Graphics: WebGPU component→
956. CVE-2026-100798firefox: Cryptography misuse in Storage: Quota Manager component→
957. CVE-2026-100797firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component→
958. CVE-2026-100795firefox: Denial-of-service in the Networking component→
959. CVE-2026-100794firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component→
960. CVE-2026-100793firefox: JIT miscompilation in the JavaScript Engine component→
961. CVE-2026-100792firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component→
962. CVE-2026-100791firefox: Use-after-free in the DOM: Core & HTML component→
963. CVE-2026-100790firefox: thunderbird: Use-after-free in the XSLT component→
964. CVE-2026-100789firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component→
965. CVE-2026-100788firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component→
966. CVE-2026-100787firefox: Sandbox escape in the XUL component→
967. CVE-2026-100786firefox: Sandbox escape due to use-after-free in the Graphics component→
968. CVE-2026-100785firefox: thunderbird: Use-after-free in the DOM: Core & HTML component→
969. CVE-2026-100784firefox: Use-after-free in the Layout: Text and Fonts component→
970. CVE-2026-100783firefox: thunderbird: Uninitialized memory in the Audio/Video component→
971. CVE-2026-100782firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component→
972. CVE-2026-100781firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component→
973. CVE-2026-100780firefox: thunderbird: Use-after-free in the DOM: Core & HTML component→
974. CVE-2026-100779firefox: thunderbird: Use-after-free in the XSLT component→
975. CVE-2026-100778firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component→
976. CVE-2026-100777firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component→
977. CVE-2026-100776firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component→
978. CVE-2026-100775firefox: thunderbird: Sandbox escape in the Graphics component→
979. CVE-2026-100774firefox: Use-after-free in the DOM: Core & HTML component→
980. CVE-2026-100773firefox: thunderbird: Use-after-free in the Storage: IndexedDB component→
981. CVE-2026-100772firefox: thunderbird: Use-after-free in the DOM: Core & HTML component→
982. CVE-2026-100771firefox: thunderbird: Undefined behavior in the DOM: Streams component→
983. CVE-2026-100770firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component→
984. CVE-2026-100769firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component→
985. CVE-2026-100768firefox: Use-after-free in the Graphics: WebGPU component→
986. CVE-2026-100767firefox: thunderbird: Use-after-free in the Networking: Cache component→
987. CVE-2026-100766firefox: thunderbird: Information disclosure in the Networking: JAR component→
988. CVE-2026-100763firefox: Incorrect boundary conditions in the Graphics: WebGPU component→
989. CVE-2026-100762firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component→
990. CVE-2026-100761firefox: Privilege escalation due to use-after-free in the Graphics: WebGPU component→
991. CVE-2026-100760firefox: Sandbox escape in the Security: Process Sandboxing component→
992. CVE-2026-100759firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component→
993. CVE-2026-100758firefox: thunderbird: Sandbox escape in the DOM: Navigation component→
994. CVE-2026-100757firefox: thunderbird: Use-after-free in the Widget component→
995. CVE-2026-100756firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component→
996. CVE-2026-100419gix-fs: gix-fs: Arbitrary code execution via symlink manipulation during checkout→
997. CVE-2026-100236dpdk: dpdk: heap out-of-bounds read/write in GSO header copy→
998. CVE-2026-100231gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP characters→
999. CVE-2026-100229gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check→
1000. CVE-2026-100105grafana: Grafana: Information disclosure via legacy schema switch in contact points→