PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 247

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 247 / 264

  1. CVE-2026-12316firefox: thunderbird: Mitigation bypass in the DOM: Security component
  2. CVE-2026-12315firefox: thunderbird: Mitigation bypass in the DOM: Security component
  3. CVE-2026-12314firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  4. CVE-2026-12313firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component
  5. CVE-2026-12312firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  6. CVE-2026-12311firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component
  7. CVE-2026-12310firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  8. CVE-2026-12309firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  9. CVE-2026-12308firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  10. CVE-2026-12307firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  11. CVE-2026-12306firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  12. CVE-2026-12305firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  13. CVE-2026-12304firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component
  14. CVE-2026-12303firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component
  15. CVE-2026-12302firefox: thunderbird: Mitigation bypass in the DOM: Security component
  16. CVE-2026-12301firefox: thunderbird: Memory safety bug fixed in Firefox 152
  17. CVE-2026-12300firefox: thunderbird: Memory safety bug fixed in Firefox 152
  18. CVE-2026-12299firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component
  19. CVE-2026-12298firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12
  20. CVE-2026-12297firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component
  21. CVE-2026-12296firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component
  22. CVE-2026-12295firefox: thunderbird: Sandbox escape in the DOM: Navigation component
  23. CVE-2026-12294firefox: thunderbird: Sandbox escape in the DOM: Workers component
  24. CVE-2026-12293firefox: thunderbird: Use-after-free in the Graphics: WebGPU component
  25. CVE-2026-12292firefox: thunderbird: Incorrect boundary conditions in the Web Audio component
  26. CVE-2026-12291firefox: thunderbird: Use-after-free in the Networking: HTTP component
  27. CVE-2026-12290firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12
  28. CVE-2026-12289firefox: thunderbird: Privilege escalation in the Graphics: WebRender component
  29. CVE-2026-12151undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
  30. CVE-2026-12143form-data: form-data: Form field override via CRLF injection
  31. CVE-2026-12087perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
  32. CVE-2026-12080qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
  33. CVE-2026-12064curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP
  34. CVE-2026-12003python: Python: Privilege escalation due to insecure VPATH handling in Windows legacy installers
  35. CVE-2026-11998angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass
  36. CVE-2026-11979libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
  37. CVE-2026-11972python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
  38. CVE-2026-11940python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
  39. CVE-2026-11884389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation
  40. CVE-2026-11873pki-core: dogtag-pki: empty request to Dogtag /ca/rest/certrequests causes HTTP 500, java exception, and stacktrace disclosure
  41. CVE-2026-11861FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships
  42. CVE-2026-11856curl: curl: Information disclosure via incorrect Digest authentication header reuse
  43. CVE-2026-11850krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
  44. CVE-2026-11837ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown
  45. CVE-2026-11824sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
  46. CVE-2026-11822sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
  47. CVE-2026-11820community.general: community.general nexmo — API credentials exposed in GET URL query string[SECURITY] community.general nexmo — API credentials exposed in GET URL query string
  48. CVE-2026-11819community.general: community.general keyring_info — OS keyring passphrase returned in plaintext
  49. CVE-2026-11793389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsing
  50. CVE-2026-11792389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)
CVE 2026 document archive — Page 247 | PulseLinux