CVE 2026 document archive · 246
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 246 / 264
- CVE-2026-13697undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives
- CVE-2026-13676fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization
- CVE-2026-13608curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack
- CVE-2026-13601yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications
- CVE-2026-13595util-linux: util-linux: heap use-after-free in libblkid nested partition probing
- CVE-2026-13574llvm: llvm-project: LLVM: Denial of service via heap-based buffer overflow in Bitcode File Handler
- CVE-2026-13573llvm: llvm: Denial of Service via stack-based buffer overflow in StringMap::insert
- CVE-2026-13503antlr: ANTLR4: antlr ANTLR4: Path traversal via manipulation of getImportedVocabFile function
- CVE-2026-13500antlr: ANTLR4: Remote code injection vulnerability
- CVE-2026-13346pip: pip: Arbitrary file installation via malicious package indexes
- CVE-2026-13321bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
- CVE-2026-13311shell-quote: shell-quote/parse: shell-quote: Denial of Service due to inefficient input parsing
- CVE-2026-13221perl: Perl: Incorrect regular expression processing via large regular expressions
- CVE-2026-13204bind: bind9: Unexpected exit with NSEC and NSEC3 both present
- CVE-2026-13149brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
- CVE-2026-13097ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore
- CVE-2026-13006logback-core: Logback-core: Arbitrary Code Execution via Malicious Configuration or Environment Variable
- CVE-2026-12969dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation
- CVE-2026-12912libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
- CVE-2026-12892gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser
- CVE-2026-12891gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (OOB read) in H.266/VVC VUI parameter parser
- CVE-2026-12860org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification
- CVE-2026-12852bouncycastle: Bouncy Castle for Java: Denial of Service via MLS wire decoder
- CVE-2026-12816org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split
- CVE-2026-12725dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported DS/DNSKEY replies
- CVE-2026-12704Grafana Enterprise: Grafana Enterprise: SAML assertion replay via skipped InResponseTo validation
- CVE-2026-12617bind: bind9: Record ordering based unexpected exit with CNAME or DNAME
- CVE-2026-12610sssd: Use-after-free crash in SSSD' 'sssd_pam' process
- CVE-2026-12590body-parser: body-parser: Denial of Service via invalid limit option
- CVE-2026-12549libsoup: Incomplete fix for CVE-2026-2443: Range suffix overflow in libsoup SoupServer
- CVE-2026-12528389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()
- CVE-2026-12505cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
- CVE-2026-12478libsoup: Incomplete fix for CVE-2026-0716: Out-of-bounds read in libsoup WebSocket frame processing (unmasked path)
- CVE-2026-12413librenswan: IKEv2 Denial of Service via malformed fragmentation
- CVE-2026-12353RHCS: Memory Leak During HTTPS Connection Leads to Denial of Service
- CVE-2026-12345python: python: Arbitrary file deletion via race condition during temporary directory cleanup
- CVE-2026-12330firefox: thunderbird: Incorrect boundary conditions in the Internationalization component
- CVE-2026-12329firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
- CVE-2026-12328firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152
- CVE-2026-12327firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152
- CVE-2026-12326firefox: thunderbird: Memory safety bugs fixed in Firefox 152 and Thunderbird 152
- CVE-2026-12325firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component
- CVE-2026-12324firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-12323firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component
- CVE-2026-12322firefox: thunderbird: Clickjacking issue in the Widget: Gtk component
- CVE-2026-12321firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-12320firefox: thunderbird: Information disclosure in the Password Manager component
- CVE-2026-12319firefox: thunderbird: Denial-of-service in the Audio/Video: Playback component
- CVE-2026-12318firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS
- CVE-2026-12317firefox: thunderbird: Memory safety bug fixed in Firefox 152