CVE 2026 document archive · 248
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 248 / 264
- CVE-2026-11791389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()
- CVE-2026-11790389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of service
- CVE-2026-11789389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crash
- CVE-2026-11788389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser
- CVE-2026-11787389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing
- CVE-2026-11786389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()
- CVE-2026-11785389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in SSO token handler
- CVE-2026-11774389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow
- CVE-2026-11770389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
- CVE-2026-11721bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards
- CVE-2026-11675chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
- CVE-2026-11663chromium-browser: skia: chromium-browser: skia: Use after free in Skia
- CVE-2026-11623tmux: tmux: Use-after-free vulnerability
- CVE-2026-11622bind: bind9: Potential memory usage beyond configured limits
- CVE-2026-11611389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditions
- CVE-2026-11610389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND
- CVE-2026-11605bind: bind9: Unnecessary validation of DNSSEC signed records
- CVE-2026-11586curl: curl: Denial of Service via WebSocket PING flood
- CVE-2026-11573qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization
- CVE-2026-11564libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse
- CVE-2026-11526perl-GD: perl-GD: Arbitrary command execution and file overwrite via crafted filenames
- CVE-2026-11525undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
- CVE-2026-11352curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability
- CVE-2026-11332ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
- CVE-2026-11331bind: bind: Denial of Service via long query names in RPZ processing
- CVE-2026-11268chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11191chromium-browser: angle: Out of bounds memory access in ANGLE
- CVE-2026-11159chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
- CVE-2026-11138chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11137chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11124chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
- CVE-2026-11123chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11121chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
- CVE-2026-11113chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
- CVE-2026-11111chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-11110chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11109chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11104chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11099chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia
- CVE-2026-11090chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11088chromium-browser: angle: Integer overflow in ANGLE
- CVE-2026-11087chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-11066chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
- CVE-2026-11065chromium-browser: angle: Use after free in ANGLE
- CVE-2026-11061chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-11057chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
- CVE-2026-11055chromium-browser: angle: Use after free in ANGLE
- CVE-2026-11051chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-11044chromium-browser: angle: Integer overflow in ANGLE
- CVE-2026-11043chromium-browser: angle: Out of bounds write in ANGLE