CVE 2026 document archive · 238
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 238 / 264
- CVE-2026-19694wireshark: Heap-based Buffer Overflow in Wireshark
- CVE-2026-19693extract-zip: extract-zip: Arbitrary file write via symlink in archive
- CVE-2026-19685NetworkManager: NetworkManager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing WPA-Enterprise server validation bypass (incomplete fix for CVE-2025-9615)
- CVE-2026-19672python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination
- CVE-2026-19668bind: BIND: Denial of Service via invalid DNSSEC records
- CVE-2026-19667bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling
- CVE-2026-19666bind: BIND: Denial of Service via malformed DNS64 responses
- CVE-2026-19662bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
- CVE-2026-19654rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
- CVE-2026-19630bind: BIND: Denial of Service via unbounded processing of crafted DNS messages
- CVE-2026-19617libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser
- CVE-2026-19553python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
- CVE-2026-19550freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes
- CVE-2026-19548binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing
- CVE-2026-19547ghostscript: ghostscript: Local privilege escalation via predictable resource search path
- CVE-2026-19546DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute
- CVE-2026-19542glibc: Fix out-of-bounds array write in tdelete
- CVE-2026-19534undici: undici: Denial of Service via unrequested WebSocket subprotocol
- CVE-2026-19499glibc: Buffer Overflow in strfmon right-justification padding
- CVE-2026-19487perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.
- CVE-2026-19475grafana: Grafana: SQL Data Source Plugin: OOM DoS via $__timeGroup macro
- CVE-2026-19445python: Use-after-free of a server-side SSLContext when sni_callback switches contexts
- CVE-2026-19411shim/dp.c library: NULL-pointer dereference in is_removable_media_path() when DevicePathToStr() returns NULL
- CVE-2026-19404389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance
- CVE-2026-19395qt-mcu: qt: Denial of Service via empty image tag attribute in styled text
- CVE-2026-19391insights-core: insights-core: Incomplete credential redaction exposes SSSD bind passwords and Pacemaker fence credentials in uploaded archives
- CVE-2026-19389gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read
- CVE-2026-19387gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder
- CVE-2026-19385postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
- CVE-2026-19248qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing
- CVE-2026-19204org.eclipse.jetty.websocket/websocket-core-common: Jetty: Denial of Service via crafted WebSocket frame with unknown opcode
- CVE-2026-19203org.eclipse.jetty/jetty-http: Jetty: HTTP request smuggling via crafted chunked requests
- CVE-2026-19197grafana: Grafana: Broken access control allows unauthorized snapshot deletion and key recovery
- CVE-2026-19176chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page
- CVE-2026-19173chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia
- CVE-2026-19161chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use
- CVE-2026-19160chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome
- CVE-2026-19157chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android
- CVE-2026-19154chromium-browser: skia: chromium-browser: Use after free in Skia
- CVE-2026-19079policycoreutils: policycoreutils: TOCTOU race condition in fixfiles allows arbitrary SELinux label manipulation
- CVE-2026-19033bind: BIND: Unauthorized zone content updates via unauthenticated IXFR deltas
- CVE-2026-19032com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization
- CVE-2026-19016consul: Consul: Authorization bypass allows arbitrary session deletion via transaction API
- CVE-2026-18938p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
- CVE-2026-18924curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections
- CVE-2026-18922389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property
- CVE-2026-18917libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow
- CVE-2026-18839popt-devel: popt-static: size_t underflow in singleOptionHelp
- CVE-2026-18798openssl: QUIC server may trigger double free when processing INITIAL packet
- CVE-2026-18743popt-devel: popt-static: Short realloc in poptConfigFileToString