PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 221

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 221 / 264

  1. CVE-2026-28901webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  2. CVE-2026-28883webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  3. CVE-2026-28871webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack
  4. CVE-2026-28861webkitgtk: A malicious website may be able to access script message handlers intended for other origins
  5. CVE-2026-28859webkitgtk: A malicious website may be able to process restricted web content outside the sandbox
  6. CVE-2026-28857webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  7. CVE-2026-28847webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  8. CVE-2026-28780Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow
  9. CVE-2026-28755NGINX: NGINX: Certificate revocation bypass when OCSP is enabled
  10. CVE-2026-28753NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests
  11. CVE-2026-28693ImageMagick: ImageMagick: Out-of-bounds read or write due to integer overflow in DIB coder
  12. CVE-2026-28692ImageMagick: ImageMagick: Information disclosure and denial of service via heap over-read in MAT decoder
  13. CVE-2026-28691ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder
  14. CVE-2026-28690ImageMagick: stack-based buffer overflow in MNG encoder
  15. CVE-2026-28689ImageMagick: ImageMagick: Information disclosure and unauthorized modification via symlink TOCTOU vulnerability
  16. CVE-2026-28688ImageMagick: use-after-free in the MSL encoder
  17. CVE-2026-28687ImageMagick: ImageMagick: Heap use-after-free vulnerability allows denial of service via crafted MSL file
  18. CVE-2026-28686ImageMagick: ImageMagick: Denial of Service via heap-buffer-overflow in PCL encode
  19. CVE-2026-28532FRRouting: frr: FRRouting: Denial of Service due to integer overflow in OSPF TLV parser functions
  20. CVE-2026-28494ImageMagick: ImageMagick: Arbitrary code execution or denial of service via maliciously crafted kernel strings
  21. CVE-2026-28493ImageMagick: ImageMagick: Denial of Service and information disclosure via integer overflow in SIXEL decoder
  22. CVE-2026-28422vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
  23. CVE-2026-28421vim: Vim: Denial of service and information disclosure via crafted swap file
  24. CVE-2026-28420vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator
  25. CVE-2026-28419vim: Vim: Information disclosure and denial of service via malformed tags file
  26. CVE-2026-28418vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing
  27. CVE-2026-28417vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
  28. CVE-2026-28390openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  29. CVE-2026-28389openssl: OpenSSL: Denial of Service vulnerability in CMS processing
  30. CVE-2026-28388openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing
  31. CVE-2026-28387openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication
  32. CVE-2026-28386openssl: openssl: Denial of Service due to out-of-bounds read in AES-CFB128
  33. CVE-2026-28383grafana: Grafana: Denial of Service via unbounded memory allocation in plugin resources endpoint
  34. CVE-2026-28380grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API
  35. CVE-2026-28379grafana: Grafana Live: Denial of Service due to a race condition
  36. CVE-2026-28378grafana: Grafana: Unauthorized public dashboard deletion across organizations
  37. CVE-2026-28377Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint
  38. CVE-2026-28376grafana: Grafana Live: Denial of Service due to unbounded memory allocation via push endpoint
  39. CVE-2026-28375grafana: Grafana: Denial of Service via testdata data-source
  40. CVE-2026-28374grafana: Grafana: Unauthorized annotation deletion by editor users
  41. CVE-2026-28369undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers
  42. CVE-2026-28368undertow: Undertow: Request smuggling via inconsistent header parsing
  43. CVE-2026-28367undertow: Undertow: Request smuggling via `\r\r\r` as a header block terminator
  44. CVE-2026-28364ocaml: OCaml: Remote code execution via buffer over-read in Marshal deserialization
  45. CVE-2026-28296gvfs: FTP GVfs backend: Arbitrary FTP command injection via CRLF sequences in file paths
  46. CVE-2026-28295gvfs: GVfs FTP backend: Information disclosure via untrusted PASV responses
  47. CVE-2026-28292simple-git: simple-git: Remote Code Execution via bypass of prior security fixes
  48. CVE-2026-28291simple-git: simple-git: Command Execution via Option-Parsing Bypass in simple-git
  49. CVE-2026-27980next.js: Next.js: Unbounded next/image disk cache growth can exhaust storage
  50. CVE-2026-27979next.js: Next.js: Unbounded postponed resume buffering can lead to DoS
CVE 2026 document archive — Page 221 | PulseLinux