PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 225

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 225 / 264

  1. CVE-2026-24491freerdp: FreeRDP has a heap-use-after-free in video_timer
  2. CVE-2026-24485ImageMagick: ImageMagick: Denial of Service via malformed PCD file processing
  3. CVE-2026-24484ImageMagick: ImageMagick: Denial of Service vulnerability via multi-layer nested MVG to SVG conversion
  4. CVE-2026-24450LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file
  5. CVE-2026-24401avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response
  6. CVE-2026-24400assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)
  7. CVE-2026-24260NVIDIA Container Toolkit: NVIDIA Container Toolkit: Privilege escalation and code execution via race condition
  8. CVE-2026-24137github.com/sigstore/sigstore: sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
  9. CVE-2026-24117github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF)
  10. CVE-2026-24072Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation
  11. CVE-2026-24049wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking
  12. CVE-2026-24031dovecot: Dovecot: Authentication bypass and user enumeration due to cleared auth_username_chars configuration
  13. CVE-2026-23952ImageMagick: ImageMagick: Denial of Service via processing of MSL comment tags
  14. CVE-2026-23950node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition
  15. CVE-2026-23948freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()
  16. CVE-2026-23918Apache HTTP Server: Apache HTTP Server: Remote Code Execution via Double Free in HTTP/2 Protocol
  17. CVE-2026-23893openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following
  18. CVE-2026-23884freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability
  19. CVE-2026-23883freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server
  20. CVE-2026-23876ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file
  21. CVE-2026-23874ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL command
  22. CVE-2026-23868giflib: Giflib: Double-free vulnerability leading to memory corruption
  23. CVE-2026-23865freetype: Information disclosure or denial of service via specially crafted font files
  24. CVE-2026-23831github.com/sigstore/rekor: Rekor denial of service
  25. CVE-2026-23745node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives
  26. CVE-2026-23732freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow
  27. CVE-2026-23679libusb: libusb: Denial of Service via malformed USB configuration descriptor
  28. CVE-2026-23666dotnet: .NET Framework: Denial of Service via Race Condition
  29. CVE-2026-23631redis: Remote code execution via use-after-free in Lua scripting
  30. CVE-2026-23534freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow
  31. CVE-2026-23533freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution
  32. CVE-2026-23532freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow
  33. CVE-2026-23531freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution.
  34. CVE-2026-23530freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server.
  35. CVE-2026-23490pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID
  36. CVE-2026-23479redis: use-after-free in unblock client flow may allow remote code execution
  37. CVE-2026-23475kernel: spi: fix statistics allocation
  38. CVE-2026-23474kernel: mtd: Avoid boot crash in RedBoot partition table parser
  39. CVE-2026-23473kernel: io_uring/poll: fix multishot recv missing EOF on wakeup race
  40. CVE-2026-23472kernel: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
  41. CVE-2026-23471kernel: drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
  42. CVE-2026-23470kernel: drm/imagination: Fix deadlock in soft reset sequence
  43. CVE-2026-23469kernel: drm/imagination: Synchronize interrupts before suspending the GPU
  44. CVE-2026-23468kernel: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
  45. CVE-2026-23467kernel: drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
  46. CVE-2026-23466kernel: drm/xe: Open-code GGTT MMIO access protection
  47. CVE-2026-23465kernel: btrfs: log new dentries when logging parent dir of a conflicting inode
  48. CVE-2026-23464kernel: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
  49. CVE-2026-23463kernel: soc: fsl: qbman: fix race condition in qman_destroy_fq
  50. CVE-2026-23462kernel: Bluetooth: HIDP: Fix possible UAF
CVE 2026 document archive — Page 225 | PulseLinux