CVE 2026 document archive · 254

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 254 / 264

12651. CVE-2026-6785firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150→
12652. CVE-2026-6784firefox: thunderbird: Memory safety bugs fixed in Firefox 150 and Thunderbird 150→
12653. CVE-2026-6783firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component→
12654. CVE-2026-6782firefox: thunderbird: Information disclosure in the IP Protection component→
12655. CVE-2026-6781firefox: thunderbird: Denial-of-service in the Audio/Video: Playback component→
12656. CVE-2026-6780firefox: thunderbird: Denial-of-service in the Audio/Video: Playback component→
12657. CVE-2026-6779firefox: thunderbird: Other issue in the JavaScript Engine component→
12658. CVE-2026-6778firefox: thunderbird: Invalid pointer in the Audio/Video: Playback component→
12659. CVE-2026-6777firefox: thunderbird: Other issue in the Networking: DNS component→
12660. CVE-2026-6776firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component→
12661. CVE-2026-6775firefox: thunderbird: Incorrect boundary conditions in the WebRTC component→
12662. CVE-2026-6774firefox: thunderbird: Mitigation bypass in the DOM: Security component→
12663. CVE-2026-6773firefox: thunderbird: Denial-of-service due to integer overflow in the Graphics: WebGPU component→
12664. CVE-2026-6772firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS→
12665. CVE-2026-6771firefox: thunderbird: Mitigation bypass in the DOM: Security component→
12666. CVE-2026-6770firefox: thunderbird: Other issue in the Storage: IndexedDB component→
12667. CVE-2026-6769firefox: thunderbird: Privilege escalation in the Debugger component→
12668. CVE-2026-6768firefox: thunderbird: Mitigation bypass in the Networking: Cookies component→
12669. CVE-2026-6767firefox: thunderbird: Other issue in the Libraries component in NSS→
12670. CVE-2026-6766firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS→
12671. CVE-2026-6765firefox: thunderbird: Information disclosure in the Form Autofill component→
12672. CVE-2026-6764firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component→
12673. CVE-2026-6763firefox: thunderbird: Mitigation bypass in the File Handling component→
12674. CVE-2026-6762firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component→
12675. CVE-2026-6761firefox: thunderbird: Privilege escalation in the Networking component→
12676. CVE-2026-6760firefox: thunderbird: Mitigation bypass in the Networking: Cookies component→
12677. CVE-2026-6759firefox: thunderbird: Use-after-free in the Widget: Cocoa component→
12678. CVE-2026-6758firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component→
12679. CVE-2026-6757firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component→
12680. CVE-2026-6756firefox: Mitigation bypass in Firefox for Android→
12681. CVE-2026-6755firefox: thunderbird: Mitigation bypass in the DOM: postMessage component→
12682. CVE-2026-6754firefox: thunderbird: Use-after-free in the JavaScript Engine component→
12683. CVE-2026-6753firefox: thunderbird: Incorrect boundary conditions in the WebRTC component→
12684. CVE-2026-6752firefox: thunderbird: Incorrect boundary conditions in the WebRTC component→
12685. CVE-2026-6751firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component→
12686. CVE-2026-6750firefox: thunderbird: Privilege escalation in the Graphics: WebRender component→
12687. CVE-2026-6749firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component→
12688. CVE-2026-6748firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component→
12689. CVE-2026-6747firefox: thunderbird: Use-after-free in the WebRTC component→
12690. CVE-2026-6746firefox: thunderbird: Use-after-free in the DOM: Core & HTML component→
12691. CVE-2026-6735PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation→
12692. CVE-2026-6734undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing→
12693. CVE-2026-6733undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.→
12694. CVE-2026-6732libxml2: libxml2: Denial of Service via crafted XSD-validated document→
12695. CVE-2026-6722php: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability→
12696. CVE-2026-6695gimp: GIMP: Remote Code Execution via crafted PAA file→
12697. CVE-2026-6694gimp: GIMP file-png plugin: Denial of Service via oversized APNG tRNS chunk→
12698. CVE-2026-6659Crypt::PasswdMD5: Perl: Crypt::PasswdMD5: Weak cryptographic salts due to predictable random number generation→
12699. CVE-2026-6654thin-vec: mozilla/thin-vec: Memory corruption vulnerability via Double-Free/Use-After-Free→
12700. CVE-2026-6653libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free→