PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 259

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 259 / 264

  1. CVE-2026-4460chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
  2. CVE-2026-4452chromium-browser: angle: Integer overflow in ANGLE
  3. CVE-2026-4448chromium-browser: angle: Heap buffer overflow in ANGLE
  4. CVE-2026-4438glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
  5. CVE-2026-4437glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
  6. CVE-2026-4430LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents
  7. CVE-2026-4428AWS-LC: AWS-LC: Security bypass allows revoked certificates to be accepted due to CRL validation error
  8. CVE-2026-4426libarchive: libarchive: Denial of Service via malformed ISO file processing
  9. CVE-2026-4424libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing
  10. CVE-2026-4408samba: Remote Code Execution in SAMR
  11. CVE-2026-4371thunderbird: Out of bounds read in IMAP parsing
  12. CVE-2026-4367libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing
  13. CVE-2026-4360python: Python Tarfile: Unexpected file ownership when extracting hardlinks
  14. CVE-2026-4271libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server
  15. CVE-2026-4224cpython: Stack overflow parsing XML with deeply nested DTD content models
  16. CVE-2026-4177perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter
  17. CVE-2026-4176Perl: Compress::Raw::Zlib: zlib: Perl: Multiple vulnerabilities due to an outdated vendored zlib library
  18. CVE-2026-4154gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow
  19. CVE-2026-4153gimp: GIMP: Remote Code Execution via PSP file parsing
  20. CVE-2026-4152gimp: GIMP: Remote Code Execution via malicious JP2 file parsing
  21. CVE-2026-4151gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow
  22. CVE-2026-4150GIMP: GIMP: Arbitrary code execution via specially crafted PSD file
  23. CVE-2026-4111libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive
  24. CVE-2026-4105systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method
  25. CVE-2026-4046glibc: glibc: Denial of Service via iconv() function with specific character sets
  26. CVE-2026-3931chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia
  27. CVE-2026-3909chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia
  28. CVE-2026-3904glibc: nscd client crash on x86_64 under high nscd load
  29. CVE-2026-3889thunderbird: Spoofing issue in Thunderbird
  30. CVE-2026-3842qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write
  31. CVE-2026-3833gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison
  32. CVE-2026-3832gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response
  33. CVE-2026-3805curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling
  34. CVE-2026-3784curl: curl: Unauthorized access due to improper HTTP proxy connection reuse
  35. CVE-2026-3783curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect
  36. CVE-2026-3731libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler
  37. CVE-2026-3713libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service
  38. CVE-2026-3644cpython: Incomplete control character validation in http.cookies
  39. CVE-2026-3634libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header
  40. CVE-2026-3633libsoup: libsoup: Header and HTTP request injection via CRLF injection
  41. CVE-2026-3632libsoup: libsoup: HTTP Smuggling and Server-Side Request Forgery via Malformed Hostnames
  42. CVE-2026-3593bind: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
  43. CVE-2026-3592bind: Amplification vulnerabilities via self-pointed glue records
  44. CVE-2026-3591bind: BIND: Unauthorized access due to use-after-return vulnerability in DNS query handling
  45. CVE-2026-3538chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  46. CVE-2026-3536chromium-browser: angle: Integer overflow in ANGLE
  47. CVE-2026-3505bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion
  48. CVE-2026-3497openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables
  49. CVE-2026-3494MariaDB: MariaDB: Information disclosure due to unlogged SQL statements with comments
  50. CVE-2026-3479python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
CVE 2026 document archive — Page 259 | PulseLinux