CVE 2026 document archive · 220

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 220 / 264

10951. CVE-2026-31397kernel: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()→
10952. CVE-2026-31396kernel: net: macb: fix use-after-free access to PTP clock→
10953. CVE-2026-31395kernel: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler→
10954. CVE-2026-31394kernel: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations→
10955. CVE-2026-31393kernel: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access→
10956. CVE-2026-31392kernel: smb: client: fix krb5 mount with username option→
10957. CVE-2026-31391kernel: crypto: atmel-sha204a - Fix OOM ->tfm_count leak→
10958. CVE-2026-31390kernel: drm/xe: Fix memory leak in xe_vm_madvise_ioctl→
10959. CVE-2026-31389kernel: spi: fix use-after-free on controller registration failure→
10960. CVE-2026-30951sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing→
10961. CVE-2026-30937ImageMagick: ImageMagick: Denial of Service via integer overflow in XWD encoder→
10962. CVE-2026-30936ImageMagick: ImageMagick: Denial of Service via crafted image processing→
10963. CVE-2026-30935ImageMagick: heap-based buffer over-read in BilateralBlurImage→
10964. CVE-2026-30931ImageMagick: ImageMagick: Heap-based buffer overflow leading to out-of-bounds write→
10965. CVE-2026-30929ImageMagick: stack-based buffer overflow in MagnifyImage→
10966. CVE-2026-30923libModSecurity3: ModSecurity: ModSecurity: Denial of Service via crafted query string parameter in t:hexDecode transformation→
10967. CVE-2026-30922pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion→
10968. CVE-2026-30892crun: crun: Privilege escalation due to incorrect parsing of the `--user` option→
10969. CVE-2026-30883ImageMagick: ImageMagick: Denial of Service due to heap overflow when processing large image profiles→
10970. CVE-2026-30656fio: fio: Denial of Service via NULL pointer dereference when parsing job files→
10971. CVE-2026-29786node-tar: hardlink path traversal via drive-relative linkpath→
10972. CVE-2026-29776freerdp: FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library→
10973. CVE-2026-29775freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId→
10974. CVE-2026-29774freerdp: FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects→
10975. CVE-2026-29518rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.→
10976. CVE-2026-29170httpd: Apache HTTP Server: Cross-site scripting in mod_proxy_ftp via HTML directory list generation→
10977. CVE-2026-29169httpd: NULL pointer dereference via specially crafted request→
10978. CVE-2026-29168httpd: mod_md: unrestricted OCSP response leads to resource exhaustion→
10979. CVE-2026-29167httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration→
10980. CVE-2026-29146Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor→
10981. CVE-2026-29145Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration→
10982. CVE-2026-29129Apache Tomcat: Apache Tomcat: Configured cipher preference order not preserved→
10983. CVE-2026-29111systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data→
10984. CVE-2026-29074svgo: SVGO: Denial of Service via XML entity expansion→
10985. CVE-2026-29063immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution→
10986. CVE-2026-29062jackson-core: jackson-core: Denial of Service via excessive JSON nesting→
10987. CVE-2026-29057next.js: Next.js: HTTP request smuggling in rewrites→
10988. CVE-2026-29036cJSON: cJSON: Data corruption and unauthorized modification via JSON Pointer escape decoding→
10989. CVE-2026-28984webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
10990. CVE-2026-28958webkitgtk: An app may be able to access sensitive user data→
10991. CVE-2026-28955webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
10992. CVE-2026-28953webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
10993. CVE-2026-28947webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
10994. CVE-2026-28946webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
10995. CVE-2026-28942webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
10996. CVE-2026-28907webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced→
10997. CVE-2026-28905webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
10998. CVE-2026-28904webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
10999. CVE-2026-28903webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
11000. CVE-2026-28902webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→