CVE 2026 document archive · 223

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 223 / 264

11101. CVE-2026-26996minimatch: minimatch: Denial of Service via specially crafted glob patterns→
11102. CVE-2026-26986freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect→
11103. CVE-2026-26983ImageMagick: ImageMagick: Denial of Service via invalid MSL map element processing→
11104. CVE-2026-26981openexr: OpenEXR: Denial of Service via heap-buffer-overflow when parsing a malformed EXR file→
11105. CVE-2026-26965freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path→
11106. CVE-2026-26963cilium: Cilium: Information disclosure via incorrect traffic permitting with specific network configurations→
11107. CVE-2026-26962rack: Rack: Header injection and response splitting via incorrect multipart header parsing→
11108. CVE-2026-26960node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation→
11109. CVE-2026-26955freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline→
11110. CVE-2026-26740giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension→
11111. CVE-2026-26284ImageMagick: ImageMagick: Out-of-bounds read via crafted Photo CD (PCD) files→
11112. CVE-2026-26283ImageMagick: ImageMagick: Denial of Service via crafted image leading to an infinite loop→
11113. CVE-2026-26271freerdp: FreeRDP: Denial of Service via crafted RDP Window Icon data→
11114. CVE-2026-26269vim: Netbeans specialKeys stack buffer overflow→
11115. CVE-2026-26171dotnet: .NET: Security Bypass and Denial of Service Vulnerability→
11116. CVE-2026-26131dotnet: .NET: Privilege escalation via incorrect default permissions→
11117. CVE-2026-26130asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation→
11118. CVE-2026-26127.net: .NET: Denial of Service via out-of-bounds read→
11119. CVE-2026-26104udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API→
11120. CVE-2026-26103udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API→
11121. CVE-2026-26081haproxy: HAProxy: Data integrity and availability vulnerability in NEW_TOKEN format→
11122. CVE-2026-26080haproxy: HAProxy: Denial of Service due to mishandled varint→
11123. CVE-2026-26066ImageMagick: ImageMagick: Denial of Service via crafted IPTC data→
11124. CVE-2026-26032Apache Ivy: Apache Ivy: File overwrite vulnerability via malicious module coordinates→
11125. CVE-2026-26007cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves→
11126. CVE-2026-25997freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect→
11127. CVE-2026-25990pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image→
11128. CVE-2026-25989ImageMagick: ImageMagick: Denial of Service via crafted SVG file→
11129. CVE-2026-25988ImageMagick: ImageMagick: Denial of Service due to memory leak in image processing→
11130. CVE-2026-25987ImageMagick: ImageMagick: Memory disclosure and denial of service via crafted MAP files→
11131. CVE-2026-25986ImageMagick: ImageMagick: Denial of Service via malicious YUV image processing→
11132. CVE-2026-25985ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder→
11133. CVE-2026-25983ImageMagick: ImageMagick: Denial of service via crafted MSL script→
11134. CVE-2026-25982ImageMagick: ImageMagick: Denial of Service or Information Disclosure via heap out-of-bounds read in DICOM file processing→
11135. CVE-2026-25971ImageMagick: ImageMagick: Denial of Service via circular references in MSL files→
11136. CVE-2026-25970ImageMagick: ImageMagick: Memory corruption and denial of service via signed integer overflow in SIXEL decoder.→
11137. CVE-2026-25969ImageMagick: ImageMagick: Memory leak leading to denial of service via image processing→
11138. CVE-2026-25968ImageMagick: ImageMagick: Memory corruption via stack buffer overflow when processing an attribute→
11139. CVE-2026-25967ImageMagick: ImageMagick: Denial of Service via crafted FTXT file→
11140. CVE-2026-25966ImageMagick: ImageMagick: Policy bypass allows unauthorized access to standard streams via fd: pseudo-filenames→
11141. CVE-2026-25965ImageMagick: ImageMagick: Local File Disclosure via Path Traversal→
11142. CVE-2026-25959freerdp: FreeRDP: Denial of Service via heap use-after-free in clipboard handling→
11143. CVE-2026-25955freerdp: FreeRDP: Denial of Service via use-after-free in xf_AppUpdateWindowFromSurface→
11144. CVE-2026-25954freerdp: FreeRDP: Use-after-free vulnerability leading to denial of service→
11145. CVE-2026-25953freerdp: FreeRDP: Denial of Service due to use-after-free vulnerability in window handling→
11146. CVE-2026-25952freerdp: FreeRDP: Denial of service due to use-after-free vulnerability→
11147. CVE-2026-25942freerdp: FreeRDP: Denial of Service via out-of-bounds read from malicious server input→
11148. CVE-2026-25941freerdp: FreeRDP: Information disclosure or client crash via out-of-bounds read in RDPGFX channel→
11149. CVE-2026-25934go-git/go-git: go-git: Data integrity issue due to improper verification of pack and index files→
11150. CVE-2026-25898ImageMagick: ImageMagick: Information disclosure or denial of service via crafted image with invalid pixel index→