PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 257

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 257 / 264

  1. CVE-2026-5409wireshark: Wireshark: Denial of service via Monero protocol dissector crash
  2. CVE-2026-5408wireshark: Wireshark: Denial of service via BT-DHT protocol dissector crash
  3. CVE-2026-5407Wireshark: Wireshark: Denial of Service from malicious SMB2 protocol data
  4. CVE-2026-5406wireshark: Wireshark: Denial of Service via FC-SWILS protocol dissector crash
  5. CVE-2026-5405wireshark: Heap-based Buffer Overflow in Wireshark
  6. CVE-2026-5404wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash
  7. CVE-2026-5403wireshark: Heap-based Buffer Overflow in Wireshark
  8. CVE-2026-5402wireshark: Heap-based Buffer Overflow in Wireshark
  9. CVE-2026-5401wireshark: Wireshark: Denial of service via AFP Spotlight protocol dissector crash
  10. CVE-2026-5367ovn: OVN: Information disclosure via crafted DHCPv6 packets
  11. CVE-2026-5358glibc: glibc: Data corruption or denial of service via buffer overflow in nis_local_principal function
  12. CVE-2026-5342LibRaw: LibRaw: Out-of-bounds read via `load_flags/raw_width` argument manipulation
  13. CVE-2026-5318LibRaw: LibRaw: Denial of Service via out-of-bounds write in JPEG DHT Parser
  14. CVE-2026-5299wireshark: Uncontrolled Recursion in Wireshark
  15. CVE-2026-5283chromium-browser: angle: Inappropriate implementation in ANGLE
  16. CVE-2026-5277chromium-browser: angle: Integer overflow in ANGLE
  17. CVE-2026-5275chromium-browser: angle: Heap buffer overflow in ANGLE
  18. CVE-2026-5265ovn: ovn: Heap Over-Read in ICMP Error Response Generation
  19. CVE-2026-5260gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
  20. CVE-2026-5223cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries
  21. CVE-2026-5201gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image
  22. CVE-2026-5172dnsmasq: extract_addresses() OOB read via malformed rdlen
  23. CVE-2026-5165virtio-win: virtio-win: Memory corruption via use-after-free in VirtIO BLK device reset
  24. CVE-2026-5164virtio-win: virtio-win: Denial of Service via unvalidated descriptor count in unmap request
  25. CVE-2026-5121libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing
  26. CVE-2026-5119libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment
  27. CVE-2026-5107FRRouting FRR: frr: FRRouting FRR: Improper access controls in EVPN Type-2 Route Handler
  28. CVE-2026-5089perl-YAML-Syck: perl-YAML-Syck: Information disclosure via out-of-bounds read in base60 parsing
  29. CVE-2026-5079multer: Multer: Denial of Service via deeply nested field names in multipart form data
  30. CVE-2026-5078morgan: morgan: Log forgery due to unneutralized control characters
  31. CVE-2026-5056gstreamer-plugins-good: GStreamer: Arbitrary code execution via stack-based buffer overflow in qtdemux
  32. CVE-2026-5038multer: Multer: Denial of Service via aborted or malformed multipart uploads
  33. CVE-2026-4980Inkscape: Inkscape: Information disclosure via crafted SVG file with malicious XInclude tags
  34. CVE-2026-4948firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization
  35. CVE-2026-4926path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions
  36. CVE-2026-4923path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards
  37. CVE-2026-4897polkit: Polkit: Denial of Service via unbounded input processing through standard input
  38. CVE-2026-4893dnsmasq: Broken ECS source validation bypass
  39. CVE-2026-4892dnsmasq: DHCPv6 CLID buffer overflow in helper process
  40. CVE-2026-4891dnsmasq: RRSIG rdlen underflow leading to heap OOB read
  41. CVE-2026-4890dnsmasq: NSEC bitmap parsing infinite loop
  42. CVE-2026-4887gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image
  43. CVE-2026-4878libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()
  44. CVE-2026-4873curl: curl: Information disclosure due to incorrect TLS connection reuse
  45. CVE-2026-4867path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters
  46. CVE-2026-4802cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI
  47. CVE-2026-4800lodash: lodash: Arbitrary code execution via untrusted input in template imports
  48. CVE-2026-4786python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
  49. CVE-2026-4775libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing
  50. CVE-2026-4729firefox: Memory safety bugs fixed in Firefox 149 and Thunderbird 149
CVE 2026 document archive — Page 257 | PulseLinux