CVE 2026 document archive · 244

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 244 / 264

12151. CVE-2026-15043DBI::SQL::Nano: DBI::SQL::Nano: Incorrect SQL operator evaluation can lead to incorrect data filtering.→
12152. CVE-2026-15041389-ds-base: 389-ds-base: Non-constant-time comparison in PBKDF2-SHA256 password verification→
12153. CVE-2026-15028libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header→
12154. CVE-2026-15003binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service→
12155. CVE-2026-14969389-ds-base: 389-ds-base: Static initialization vector in AES-CBC/3DES-CBC attribute encryption→
12156. CVE-2026-14957libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process→
12157. CVE-2026-14940389-ds-base: 389-ds-base: heap-buffer-overflow in DN normalization via quoted multivalued RDN→
12158. CVE-2026-14935gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check→
12159. CVE-2026-14899thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding→
12160. CVE-2026-14740DBI: DBI for Perl: Out-of-bounds read in SQL comment processing→
12161. CVE-2026-14739DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders→
12162. CVE-2026-14686HdrHistogram: HdrHistogram: Data integrity impact due to incorrect comparison→
12163. CVE-2026-14685HdrHistogram: HdrHistogram: Local state issue via 'Count' argument manipulation→
12164. CVE-2026-14684org.hdrhistogram/HdrHistogram: HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer→
12165. CVE-2026-14683HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation→
12166. CVE-2026-14682org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation→
12167. CVE-2026-14681postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection→
12168. CVE-2026-14680postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments→
12169. CVE-2026-14679postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation→
12170. CVE-2026-14678postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm→
12171. CVE-2026-14677postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl→
12172. CVE-2026-14676postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow→
12173. CVE-2026-14673postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path→
12174. CVE-2026-14672postgresql: PostgreSQL: User existence oracle in SCRAM authentication→
12175. CVE-2026-14671postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module→
12176. CVE-2026-14670postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow→
12177. CVE-2026-14669postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation→
12178. CVE-2026-14668postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator→
12179. CVE-2026-14666postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access→
12180. CVE-2026-14664postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp→
12181. CVE-2026-14663postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers→
12182. CVE-2026-14662postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions→
12183. CVE-2026-14631webpack-dev-server: webpack-dev-server: Denial of Service via malformed headers→
12184. CVE-2026-14620webpack-dev-server: webpack-dev-server: Arbitrary file opening and denial of service via exposed developer endpoints→
12185. CVE-2026-14612freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorization→
12186. CVE-2026-14610assimp: Open Asset Import Library Assimp: Heap-based buffer overflow allows local information disclosure and denial of service→
12187. CVE-2026-14604assimp: Assimp: Denial of Service vulnerability in PLY Model Handler→
12188. CVE-2026-14586unbound: Unbound: Denial of Service via assertion failure in DNS-over-QUIC environments→
12189. CVE-2026-14544HPLIP: Incomplete Fix for CVE-2026-8631→
12190. CVE-2026-14476sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass→
12191. CVE-2026-14474sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation→
12192. CVE-2026-14461mtr: mtr: Denial of Service via crafted DNS responses→
12193. CVE-2026-14457openssl: RPK server signature algorithm selection can dereference a missing certificate→
12194. CVE-2026-14456openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server→
12195. CVE-2026-14429chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia→
12196. CVE-2026-14427chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia→
12197. CVE-2026-14425chromium-browser: angle: chromium-browser: Use after free in ANGLE→
12198. CVE-2026-14419chromium-browser: skia: chromium-browser: skia: Use after free in Skia→
12199. CVE-2026-14418chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE→
12200. CVE-2026-14414chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia→