PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 260

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 260 / 264

  1. CVE-2026-3449@tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal
  2. CVE-2026-3446python: Python base64: Incomplete data decoding due to premature stop at padding
  3. CVE-2026-3442binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker
  4. CVE-2026-3441binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file
  5. CVE-2026-3381compress-raw-zlib: Compress::Raw::Zlib: Vulnerabilities due to outdated zlib library
  6. CVE-2026-3338aws-lc: AWS-LC: Signature bypass due to improper validation in PKCS7_verify()
  7. CVE-2026-3337aws-lc: AWS-LC: Information disclosure via timing discrepancy in AES-CCM decryption
  8. CVE-2026-3336aws-lc: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects
  9. CVE-2026-3304multer: Multer: Denial of Service via malformed requests
  10. CVE-2026-3276python: Python unicodedata: Denial of Service due to excessive CPU consumption
  11. CVE-2026-3260undertow: Undertow: Denial of Service due to premature multipart/form-data parsing in GET requests
  12. CVE-2026-3238samba: Denial of service against AD DC WINS server
  13. CVE-2026-3234mod_proxy_cluster: mod_proxy_cluster: Response body corruption via CRLF injection
  14. CVE-2026-3219pip: pip: Incorrect file installation due to improper archive handling
  15. CVE-2026-3203wireshark: Buffer Over-read in Wireshark
  16. CVE-2026-3202wireshark: NULL Pointer Dereference in Wireshark
  17. CVE-2026-3201wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark
  18. CVE-2026-3196qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation
  19. CVE-2026-3195qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730)
  20. CVE-2026-3184util-linux: util-linux: Access control bypass due to improper hostname canonicalization
  21. CVE-2026-3172pgvector: pgvector: Information disclosure or denial of service via buffer overflow in parallel HNSW index build
  22. CVE-2026-3119bind: BIND: Denial of Service via authenticated TKEY queries
  23. CVE-2026-3104bind: BIND: Denial of Service via specially crafted domain query causing a memory leak
  24. CVE-2026-3099libsoup: Libsoup: Authentication bypass via digest authentication replay attack
  25. CVE-2026-3086GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in H.266 Codec Parser
  26. CVE-2026-3085gstreamer-plugins-good: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay
  27. CVE-2026-3084GStreamer: GStreamer: Remote Code Execution via integer underflow in H.266 Codec Parser
  28. CVE-2026-3083gstreamer-plugins-good: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay
  29. CVE-2026-3082gstreamer-plugins-bad: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser
  30. CVE-2026-3081GStreamer: GStreamer: Arbitrary code execution via H.266 codec parsing stack-based buffer overflow
  31. CVE-2026-3039bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
  32. CVE-2026-3012samba: group policy certificate enrollment uses http:// without validation
  33. CVE-2026-2950lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass
  34. CVE-2026-2923gstreamer-plugins-bad: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling
  35. CVE-2026-2922gstreamer-plugins-ugly: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer
  36. CVE-2026-2921gstreamer-plugins-base: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling
  37. CVE-2026-2920gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing
  38. CVE-2026-2903re2c: re2c: Denial of Service via null pointer dereference
  39. CVE-2026-2808github.com/hashicorp/consul: HashiCorp Consul: Arbitrary file read via Kubernetes authentication configuration
  40. CVE-2026-2807firefox: thunderbird: Memory safety bugs fixed in Firefox 148 and Thunderbird 148
  41. CVE-2026-2806firefox: thunderbird: Uninitialized memory in the Graphics: Text component
  42. CVE-2026-2805firefox: thunderbird: Invalid pointer in the DOM: Core & HTML component
  43. CVE-2026-2804firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component
  44. CVE-2026-2803firefox: thunderbird: Information disclosure, mitigation bypass in the Settings UI component
  45. CVE-2026-2802firefox: thunderbird: Race condition in the JavaScript: GC component
  46. CVE-2026-2801firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component
  47. CVE-2026-2800firefox: thunderbird: Spoofing issue in the WebAuthn component in Firefox for Android
  48. CVE-2026-2799firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
  49. CVE-2026-2798firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
  50. CVE-2026-2797firefox: thunderbird: Use-after-free in the JavaScript: GC component
CVE 2026 document archive — Page 260 | PulseLinux