PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 243

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 243 / 264

  1. CVE-2026-16239postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
  2. CVE-2026-16238postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()
  3. CVE-2026-16221fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency
  4. CVE-2026-16118xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
  5. CVE-2026-15972consul: consul-enterprise: Consul: Denial of Service via unbounded external gRPC connection acceptance
  6. CVE-2026-15928xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component
  7. CVE-2026-15816dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
  8. CVE-2026-15815grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION
  9. CVE-2026-15813kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation
  10. CVE-2026-15812kronosnet: kronosnet: access control list bypass via link ID spoofing on unencrypted dynamic links
  11. CVE-2026-15811kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes
  12. CVE-2026-15792github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request
  13. CVE-2026-15789buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability
  14. CVE-2026-15779samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation
  15. CVE-2026-15774chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  16. CVE-2026-15766chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
  17. CVE-2026-15742postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
  18. CVE-2026-15741postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
  19. CVE-2026-15722389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing
  20. CVE-2026-15719firefox: thunderbird: Site isolation issue in the DOM: Navigation component
  21. CVE-2026-15718firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component
  22. CVE-2026-15714libsoup: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string
  23. CVE-2026-15713libsoup: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak
  24. CVE-2026-15711libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation
  25. CVE-2026-15709SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service
  26. CVE-2026-15603morgan: morgan: Log Forging via unescaped Unicode line separators
  27. CVE-2026-15588GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering
  28. CVE-2026-15577grafana: Grafana: Unauthorized configuration modification via status subresource
  29. CVE-2026-15534perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
  30. CVE-2026-15392perl-DBI: DBD::File: Arbitrary file read/write via symlink vulnerability
  31. CVE-2026-15370libssh: libssh: stack buffer overflow in SFTP server longname construction
  32. CVE-2026-15308python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
  33. CVE-2026-15187enquirer: Enquirer: Prototype pollution vulnerability allows remote attackers to modify object attributes
  34. CVE-2026-15176nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename
  35. CVE-2026-15174wireshark: Wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash
  36. CVE-2026-15173Wireshark: Wireshark: Denial of Service via pcapng file parser crash
  37. CVE-2026-15172wireshark: Wireshark: Denial of service via FMP/NOTIFY protocol dissector crash
  38. CVE-2026-15171wireshark: Wireshark: Denial of service via SSH protocol dissector crash
  39. CVE-2026-15169wireshark: Wireshark: Denial of Service via UMTS FP protocol dissector crash
  40. CVE-2026-15168wireshark: Wireshark: Information disclosure in BLF file parser
  41. CVE-2026-15167wireshark: Wireshark: Denial of Service via DBS Etherwatch file parser crash
  42. CVE-2026-15165wireshark: Wireshark: Denial of Service via TLS ECH decryptor crash
  43. CVE-2026-15164wireshark: Wireshark: Denial of Service vulnerability in ciscodump
  44. CVE-2026-15163wireshark: Wireshark: Denial of Service via multiple protocol dissector infinite loops
  45. CVE-2026-15146wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass
  46. CVE-2026-15109chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
  47. CVE-2026-15075vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects
  48. CVE-2026-15060systemd-machined: systemd-machined: Unprivileged users can terminate arbitrary processes
  49. CVE-2026-15059systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API
  50. CVE-2026-15055org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bc-fips: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of service due to unbounded KDF cost in PKCS#8 / PBES2 decryptors
CVE 2026 document archive — Page 243 | PulseLinux