PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 211

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 211 / 264

  1. CVE-2026-33210ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection
  2. CVE-2026-33186google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation
  3. CVE-2026-33179libfuse: libfuse: Denial of Service via NULL pointer dereference and memory leak
  4. CVE-2026-33150libfuse: libfuse: Arbitrary code execution via use-after-free in io_uring subsystem
  5. CVE-2026-33116dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform
  6. CVE-2026-33056tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive
  7. CVE-2026-33007httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash
  8. CVE-2026-33006httpd: mod_auth_digest: timing attack allows a bypass of digest authentication
  9. CVE-2026-32990Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix
  10. CVE-2026-32952go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge
  11. CVE-2026-32854LibVNCServer: LibVNCServer: Denial of Service via specially crafted HTTP requests
  12. CVE-2026-32853LibVNCServer: LibVNCServer: Information disclosure or Denial of Service via heap out-of-bounds read in UltraZip encoding
  13. CVE-2026-32792unbound: Packet of death with DNSCrypt
  14. CVE-2026-32791Intel Performance Counter Monitor: Intel Performance Counter Monitor: Escalation of Privilege via Untrusted Search Path
  15. CVE-2026-32778libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition
  16. CVE-2026-32777libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing
  17. CVE-2026-32776libexpat: libexpat: Denial of Service due to NULL pointer dereference
  18. CVE-2026-32775libexif: libexif: Buffer overwrite via integer underflow in MakerNotes decoding
  19. CVE-2026-32766astral-tokio-tar: astral-tokio-tar: Potential archive misinterpretation via malformed PAX extensions
  20. CVE-2026-32762rack: Rack: Parameter smuggling via improper Forwarded header parsing
  21. CVE-2026-32748Squid: Squid: Denial of Service via crafted ICP traffic
  22. CVE-2026-32710MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability
  23. CVE-2026-32665unbound: Unbound: Denial of Service via improper validation of DNS-over-QUIC client length
  24. CVE-2026-32647nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files
  25. CVE-2026-32636ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in NewXMLTree method
  26. CVE-2026-32635@angular/core: @angular/compiler: Angular has XSS in i18n attribute bindings
  27. CVE-2026-32597pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
  28. CVE-2026-32327apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack
  29. CVE-2026-32316jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow
  30. CVE-2026-32289html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals
  31. CVE-2026-32288archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive
  32. CVE-2026-32287github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions
  33. CVE-2026-32286github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server
  34. CVE-2026-32284github.com/shamaton/msgpack: msgpack: Denial of Service via truncated fixext data
  35. CVE-2026-32283crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
  36. CVE-2026-32282golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
  37. CVE-2026-32281crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
  38. CVE-2026-32280crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
  39. CVE-2026-32259ImageMagick: stack-based buffer overflow in sixel encoder
  40. CVE-2026-32249vim: NFA regex engine NULL pointer dereference
  41. CVE-2026-32226dotnet: .NET Framework: Denial of Service via race condition
  42. CVE-2026-32203dotnet: .NET: Denial of Service via stack overflow
  43. CVE-2026-32178dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw
  44. CVE-2026-32177dotnet: .NET: heap-based buffer overflow allows an attacker to elevate privileges locally
  45. CVE-2026-32175dotnet: .NET: improper handling of files allows an attacker to write to certain locations
  46. CVE-2026-32146gleam: Gleam compiler: Arbitrary file system modification and potential code execution via improper path validation in git dependency handling.
  47. CVE-2026-32141flatted: flatted: Unbounded recursion DoS in parse() revive phase
  48. CVE-2026-31988yauzl: yauzl: Denial of Service vulnerability in zip file processing
  49. CVE-2026-31958tornado-python: Tornado: Denial of Service via large multipart bodies
  50. CVE-2026-31912libpcap: libpcap: Denial of service via crafted BPF filter program
CVE 2026 document archive — Page 211 | PulseLinux