CVE 2026 document archive · 253

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 253 / 264

12601. CVE-2026-7923chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia→
12602. CVE-2026-7920chromium-browser: skia: chromium-browser: skia: Use after free in Skia→
12603. CVE-2026-7903chromium-browser: angle: Integer overflow in ANGLE→
12604. CVE-2026-7901chromium-browser: angle: Use after free in ANGLE→
12605. CVE-2026-7900chromium-browser: angle: Heap buffer overflow in ANGLE→
12606. CVE-2026-7867udisks2: udisks2: Local Privilege Escalation via as-user option spoofing→
12607. CVE-2026-7774python: CPython: Python tarfile: Arbitrary file write via crafted link entries→
12608. CVE-2026-7598libssh2: integer overflow via large username or password arguments→
12609. CVE-2026-7568php: signed integer overflow in metaphone()→
12610. CVE-2026-7383openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing→
12611. CVE-2026-7378Wireshark: sharkd: Wireshark sharkd: Denial of Service via crash vulnerability→
12612. CVE-2026-7376Wireshark: sharkd: Wireshark sharkd: Denial of Service due to crash→
12613. CVE-2026-7375Wireshark: Wireshark: Denial of Service via UDS protocol dissector infinite loop→
12614. CVE-2026-7359chromium-browser: angle: Use after free in ANGLE→
12615. CVE-2026-7354chromium-browser: angle: Out of bounds read and write in Angle→
12616. CVE-2026-7353chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia→
12617. CVE-2026-7340chromium-browser: angle: Integer overflow in ANGLE→
12618. CVE-2026-7324firefox: Memory safety bugs fixed in Firefox 150.0.1→
12619. CVE-2026-7323firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1→
12620. CVE-2026-7322firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1→
12621. CVE-2026-7321firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component→
12622. CVE-2026-7320firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component→
12623. CVE-2026-7263php: denial of service via DOMNode::C14N()→
12624. CVE-2026-7262php: NULL pointer dereference in SOAP apache:Map decoder with missing→
12625. CVE-2026-7261PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling→
12626. CVE-2026-7260php: PHP: Denial of Service via circular symbolic links in phar archives→
12627. CVE-2026-7259php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()→
12628. CVE-2026-7258PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions→
12629. CVE-2026-7210python: Python/Expat: Denial of Service via crafted XML document→
12630. CVE-2026-7168curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse→
12631. CVE-2026-7009curl: Curl: Certificate validation bypass due to OCSP stapling flaw→
12632. CVE-2026-6993go-kratos: go-kratos kratos: Information disclosure via unintended HTTP server intermediary→
12633. CVE-2026-6951simple-git: simple-git: Remote Code Execution due to incomplete fix bypass→
12634. CVE-2026-6949samba: TSIG packet with crafted name compression can crash DNS server→
12635. CVE-2026-6893dracut: dracut: Root code execution via DHCP options command injection→
12636. CVE-2026-6870Wireshark: Wireshark: Denial of service via GSM RP protocol dissector crash→
12637. CVE-2026-6869wireshark: Wireshark: Denial of Service via WebSocket protocol dissector crash→
12638. CVE-2026-6868wireshark: Wireshark: Denial of Service via malicious network capture file→
12639. CVE-2026-6867wireshark: Wireshark: Denial of service via SMB2 protocol dissector crash→
12640. CVE-2026-6862efivar: efivar: Denial of Service due to stack overflow in device path node parsing→
12641. CVE-2026-6861emacs: Emacs: Memory corruption vulnerability when processing SVG CSS→
12642. CVE-2026-6860eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name→
12643. CVE-2026-6846binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing→
12644. CVE-2026-6845binutils: Binutils: Denial of Service via crafted ELF file→
12645. CVE-2026-6844binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files→
12646. CVE-2026-6843nano: nano: Format string vulnerability leads to Denial of Service→
12647. CVE-2026-6842nano: nano: Local attacker can inject malicious .desktop launcher due to insecure directory permissions→
12648. CVE-2026-6791glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion→
12649. CVE-2026-6790jetty: Jetty: Improper Host header validation can lead to request routing issues→
12650. CVE-2026-6786firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150→