CVE 2026 document archive · 249
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 249 / 264
- CVE-2026-11040chromium-browser: angle: Use after free in ANGLE
- CVE-2026-11039chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
- CVE-2026-11024chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia
- CVE-2026-11005chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-11004chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-10999chromium-browser: angle: Out of bounds memory access in ANGLE
- CVE-2026-10994chromium-browser: angle: Uninitialized Use in ANGLE
- CVE-2026-10993chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
- CVE-2026-10985chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
- CVE-2026-10979chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-10977chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia
- CVE-2026-10974chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
- CVE-2026-10955chromium-browser: angle: Type Confusion in ANGLE
- CVE-2026-10941chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia
- CVE-2026-10930chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-10929chromium-browser: angle: Heap buffer overflow in ANGLE
- CVE-2026-10925chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia
- CVE-2026-10919chromium-browser: angle: Use after free in ANGLE
- CVE-2026-10914chromium-browser: angle: Use after free in ANGLE
- CVE-2026-10913chromium-browser: angle: Use after free in ANGLE
- CVE-2026-10907chromium-browser: angle: Out of bounds write in ANGLE
- CVE-2026-10889chromium-browser: angle: Out of bounds read in ANGLE
- CVE-2026-10883chromium-browser: angle: Out of bounds write in ANGLE
- CVE-2026-10881chromium-browser: angle: Out of bounds read and write in ANGLE
- CVE-2026-10879perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution.
- CVE-2026-10846ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching
- CVE-2026-10822bind: bind9: Key Record using PRIVATEDNS algorithm may lead to exit
- CVE-2026-10805NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend
- CVE-2026-10732decompress: Decompress: Arbitrary file write leading to remote code execution via crafted ZIP archive (Zip Slip)
- CVE-2026-10723bind: bind9: Incorrect acceptance of NSEC3 records
- CVE-2026-10722github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow
- CVE-2026-10702firefox: JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-10701firefox: Incorrect boundary conditions in the Graphics: Text component
- CVE-2026-10649pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression
- CVE-2026-10601grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal
- CVE-2026-10536libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service
- CVE-2026-10275opensc: OpenSC: Buffer overflow in pkcs11-tool Key Generation Module
- CVE-2026-10233assimp: Assimp: Out-of-bounds read in Half-Life 1 MDL Loader allows information disclosure
- CVE-2026-10232assimp: Assimp: Use-after-free vulnerability allows local impact
- CVE-2026-10231assimp: Assimp: Local heap-based buffer overflow allows denial of service or arbitrary code execution
- CVE-2026-10230assimp: Assimp: Local heap-based buffer overflow in Half-Life 1 MDL Loader
- CVE-2026-10229assimp: Assimp: Heap-based buffer overflow in Half-Life 1 MDL Loader
- CVE-2026-10201assimp: Assimp: Denial of Service via divide-by-zero in FBXExporter
- CVE-2026-10200assimp: Assimp: Heap-based buffer overflow in glTFCommon::CopyValue function
- CVE-2026-10199assimp: Assimp: Denial of Service via null pointer dereference in glTF2::LazyDict
- CVE-2026-10198assimp: Assimp: Denial of Service via null pointer dereference in glTFImporter
- CVE-2026-10197assimp: Assimp: Denial of Service via null pointer dereference in glTF2Importer
- CVE-2026-10118poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication
- CVE-2026-10051jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections
- CVE-2026-10050jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision