PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 251

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 251 / 264

  1. CVE-2026-9679undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
  2. CVE-2026-9678undici: Undici: Information disclosure due to improper cache-control header parsing
  3. CVE-2026-9675undici: undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
  4. CVE-2026-9672libgd: buffer overflow when processing specially crafted GIF file
  5. CVE-2026-9669python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
  6. CVE-2026-9595webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration
  7. CVE-2026-9547curl: curl: Man-in-the-middle attack via SSH host key bypass
  8. CVE-2026-9546libcurl: libcurl: Information disclosure due to persistent Referer header
  9. CVE-2026-9545libcurl: libcurl: Information disclosure via cached SSL session and early data
  10. CVE-2026-9538perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
  11. CVE-2026-9499qt: Qt: Denial of Service via out-of-bounds read in text codec handling
  12. CVE-2026-9496pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function
  13. CVE-2026-9358postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization
  14. CVE-2026-9323urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
  15. CVE-2026-9277shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators
  16. CVE-2026-9256nginx: ngx_http_rewrite_module: code execution and denial of service
  17. CVE-2026-9150libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums
  18. CVE-2026-9149libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
  19. CVE-2026-9080libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback
  20. CVE-2026-9079libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials
  21. CVE-2026-9076openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
  22. CVE-2026-9064389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS)
  23. CVE-2026-9029grafana: Grafana: Arbitrary code execution and information disclosure via Cross-Site Scripting in geomap panel
  24. CVE-2026-8975firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151
  25. CVE-2026-8974firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151
  26. CVE-2026-8973firefox: thunderbird: Memory safety bugs fixed in Firefox 151
  27. CVE-2026-8972firefox: thunderbird: Privilege escalation in the WebRTC: Audio/Video component
  28. CVE-2026-8971firefox: thunderbird: Same-origin policy bypass in the Networking: JAR component
  29. CVE-2026-8970firefox: Privilege escalation in the Security component
  30. CVE-2026-8969firefox: thunderbird: Mitigation bypass in the DOM: Security component
  31. CVE-2026-8968firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component
  32. CVE-2026-8967firefox: thunderbird: Information disclosure in the Graphics: WebGPU component
  33. CVE-2026-8966firefox: thunderbird: Information disclosure in the IP Protection component
  34. CVE-2026-8965firefox: thunderbird: Information disclosure in the DOM: Security component
  35. CVE-2026-8964firefox: thunderbird: Spoofing issue in the Popup Blocker component
  36. CVE-2026-8963firefox: thunderbird: Spoofing issue in the Web Speech component
  37. CVE-2026-8962firefox: Mitigation bypass in the DOM: Security component
  38. CVE-2026-8961firefox: Spoofing issue in the Form Autofill component
  39. CVE-2026-8960firefox: thunderbird: Spoofing issue in WebExtensions
  40. CVE-2026-8959firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
  41. CVE-2026-8958firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component
  42. CVE-2026-8957firefox: Privilege escalation in the Enterprise Policies component
  43. CVE-2026-8956firefox: Integer overflow in the Networking: JAR component
  44. CVE-2026-8955firefox: thunderbird: Privilege escalation in the DOM: Workers component
  45. CVE-2026-8954firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component
  46. CVE-2026-8953firefox: Sandbox escape due to use-after-free in the Disability Access APIs component
  47. CVE-2026-8952firefox: thunderbird: Privilege escalation in the Application Update component
  48. CVE-2026-8951firefox: Spoofing issue in the Toolbar component in Firefox for Android
  49. CVE-2026-8950firefox: Same-origin policy bypass in the Networking: HTTP component
  50. CVE-2026-8949firefox: thunderbird: Integer overflow in the Widget: Win32 component
CVE 2026 document archive — Page 251 | PulseLinux