CVE 2026 document archive · 255

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 255 / 264

12701. CVE-2026-6638postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication→
12702. CVE-2026-6637postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module→
12703. CVE-2026-6575postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()→
12704. CVE-2026-6554libpcap: libpcap: Denial of Service via infinite loop in BPF interpreter→
12705. CVE-2026-6538Wireshark: Wireshark: Denial of Service via BEEP protocol dissector crash→
12706. CVE-2026-6537Wireshark: Wireshark: Denial of Service via ZigBee protocol dissector crash→
12707. CVE-2026-6536wireshark: Wireshark: Denial of Service via DLMS/COSEM protocol dissector infinite loop→
12708. CVE-2026-6535wireshark: Wireshark: Denial of service via zlib decompression crash→
12709. CVE-2026-6534wireshark: Wireshark: Denial of Service via USB HID protocol dissector infinite loop→
12710. CVE-2026-6533Wireshark: Wireshark: Denial of service via LZ77 decompression crash→
12711. CVE-2026-6532wireshark: Wireshark: Denial of service via Kismet protocol dissector crash→
12712. CVE-2026-6531Wireshark: Wireshark: Denial of Service via SANE protocol dissector infinite loop→
12713. CVE-2026-6530wireshark: Wireshark: Denial of Service via DCP-ETSI protocol dissector crash→
12714. CVE-2026-6529wireshark: Wireshark: Denial of Service via iLBC audio codec processing→
12715. CVE-2026-6528Wireshark: Wireshark: Denial of service via TLS protocol dissector infinite loop→
12716. CVE-2026-6527wireshark: Wireshark: Denial of Service due to ASN.1 PER protocol dissector crash→
12717. CVE-2026-6526wireshark: Wireshark: Denial of Service due to RTSP protocol dissector crash→
12718. CVE-2026-6525wireshark: NULL Pointer Dereference in Wireshark→
12719. CVE-2026-6524wireshark: Wireshark: Denial of Service via MySQL protocol dissector crash→
12720. CVE-2026-6523wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark→
12721. CVE-2026-6522Wireshark: Wireshark: Denial of Service via RPKI-Router protocol dissector infinite loop→
12722. CVE-2026-6521Wireshark: Wireshark: Denial of Service via OpenFlow v5 protocol dissector infinite loop→
12723. CVE-2026-6520Wireshark: Wireshark: Denial of Service via OpenFlow v6 protocol dissector infinite loop→
12724. CVE-2026-6519Wireshark: Wireshark: Denial of Service via MBIM protocol dissector infinite loop→
12725. CVE-2026-6507dnsmasq: dnsmasq: Denial of Service due to out-of-bounds write in DHCP BOOTREPLY processing→
12726. CVE-2026-6479postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation→
12727. CVE-2026-6478postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison→
12728. CVE-2026-6477postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory→
12729. CVE-2026-6476postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser→
12730. CVE-2026-6475postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind→
12731. CVE-2026-6474postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function→
12732. CVE-2026-6473postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write→
12733. CVE-2026-6472postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege→
12734. CVE-2026-6471postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin→
12735. CVE-2026-6470postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands→
12736. CVE-2026-6469postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification→
12737. CVE-2026-6464postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN→
12738. CVE-2026-6429curl: libcurl: Credential leak via reused proxy connection during HTTP redirects→
12739. CVE-2026-6426qemu-kvm: vhost inflight migration VMState integer type mismatch causes out-of-bounds access→
12740. CVE-2026-6420keylime: Keylime: Security bypass due to hardcoded TPM quote nonce→
12741. CVE-2026-6402webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure→
12742. CVE-2026-6390nano: GNU nano: Arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.→
12743. CVE-2026-6384gimp: GIMP: Arbitrary code execution or denial of service via buffer overflow in GIF image processing→
12744. CVE-2026-6368glibc: glibc: Process abort due to invalid memory in wordexp→
12745. CVE-2026-6364chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia→
12746. CVE-2026-6357pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation→
12747. CVE-2026-6324libsoup: libsoup: HTTP Request Smuggling via Unsigned to Signed Conversion Error→
12748. CVE-2026-6322fast-uri: fast-uri: URI authority bypass due to improper delimiter handling→
12749. CVE-2026-6321fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies→
12750. CVE-2026-6298chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia→