PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 224

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 224 / 264

  1. CVE-2026-25897ImageMagick: ImageMagick: Out-of-bounds heap write via integer overflow in sun decoder
  2. CVE-2026-25884Exiv2: Exiv2: Denial of service via out-of-bounds read in CRW image parser
  3. CVE-2026-25854Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve
  4. CVE-2026-25800quinn: Quinn: Remote memory exhaustion via malformed QUIC stream fragments
  5. CVE-2026-25799ImageMagick: ImageMagick: Denial of Service via YUV sampling factor validation error
  6. CVE-2026-25798ImageMagick: ImageMagick: Denial of Service via crafted image file
  7. CVE-2026-25797ImageMagick: ImageMagick: Arbitrary code execution via crafted PostScript files
  8. CVE-2026-25796ImageMagick: ImageMagick: Denial of Service Vulnerability
  9. CVE-2026-25795ImageMagick: ImageMagick: Denial of Service due to NULL pointer dereference during temporary file creation failure
  10. CVE-2026-25794ImageMagick: ImageMagick: Denial of service and potential arbitrary code execution via integer overflow in image processing
  11. CVE-2026-25749vim: Vim: Arbitrary code execution via 'helpfile' option processing
  12. CVE-2026-25727time: time affected by a stack exhaustion denial of service attack
  13. CVE-2026-25681golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting
  14. CVE-2026-25680golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing
  15. CVE-2026-25679net/url: Incorrect parsing of IPv6 host literals in net/url
  16. CVE-2026-25646libpng: LIBPNG has a heap buffer overflow in png_set_quantize
  17. CVE-2026-25645requests: Requests: Security bypass due to predictable temporary file creation
  18. CVE-2026-25639axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig
  19. CVE-2026-25638ImageMagick: ImageMagick: Denial of Service due to memory leak in image processing
  20. CVE-2026-25637ImageMagick: ImageMagick: Denial of Service via crafted image due to memory leak
  21. CVE-2026-25589RedisBloom: RESTORE invalid memory access may allow remote code execution
  22. CVE-2026-25576ImageMagick: ImageMagick: Information disclosure due to heap buffer over-read when processing malformed images
  23. CVE-2026-25547brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion
  24. CVE-2026-25506MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery
  25. CVE-2026-25500rubygem-rack: Rack stored XSS in Rack::Directory
  26. CVE-2026-25243redis: RESTORE invalid memory access may allow remote code execution
  27. CVE-2026-25210libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation
  28. CVE-2026-25068alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow
  29. CVE-2026-24883GnuPG: GnuPG: Denial of service due to specially crafted signature packet
  30. CVE-2026-24882GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution
  31. CVE-2026-24881GnuPG: GnuPG: Remote code execution and denial of service via crafted CMS EnvelopedData message
  32. CVE-2026-24880Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension
  33. CVE-2026-24869firefox: Use-after-free in the Layout: Scrolling and Overflow component
  34. CVE-2026-24868firefox: Mitigation bypass in the Privacy: Anti-Tracking component
  35. CVE-2026-24842node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check
  36. CVE-2026-24825ydb: ydb: Denial of Service via memory leak
  37. CVE-2026-24734tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation
  38. CVE-2026-24733tomcat: security constraint bypass with HTTP/0.9
  39. CVE-2026-24684freerdp: FreeRDP has a Heap-use-after-free in play_thread
  40. CVE-2026-24683freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event
  41. CVE-2026-24682freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free
  42. CVE-2026-24681freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb
  43. CVE-2026-24680freerdp: FreeRDP has a heap-use-after-free in update_pointer_new(SDL)
  44. CVE-2026-24679freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface
  45. CVE-2026-24678freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write
  46. CVE-2026-24677freerdp: FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264
  47. CVE-2026-24676freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation
  48. CVE-2026-24675freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface
  49. CVE-2026-24660LibRaw: LibRaw: Memory Corruption via Malicious File Processing
  50. CVE-2026-24515libexpat: libexpat null pointer dereference
CVE 2026 document archive — Page 224 | PulseLinux