CVE 2026 document archive · 261
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 261 / 264
- CVE-2026-2796firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-2795firefox: Use-after-free in the JavaScript: GC component
- CVE-2026-2794firefox: Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android
- CVE-2026-2793firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- CVE-2026-2792firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- CVE-2026-2791firefox: thunderbird: Mitigation bypass in the Networking: Cache component
- CVE-2026-2790firefox: thunderbird: Same-origin policy bypass in the Networking: JAR component
- CVE-2026-2789firefox: thunderbird: Use-after-free in the Graphics: ImageLib component
- CVE-2026-2788firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component
- CVE-2026-2787firefox: thunderbird: Use-after-free in the DOM: Window and Location component
- CVE-2026-2786firefox: thunderbird: Use-after-free in the JavaScript Engine component
- CVE-2026-2785firefox: thunderbird: Invalid pointer in the JavaScript Engine component
- CVE-2026-2784firefox: thunderbird: Mitigation bypass in the DOM: Security component
- CVE-2026-2783firefox: thunderbird: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-2782firefox: thunderbird: Privilege escalation in the Netmonitor component
- CVE-2026-2781firefox: thunderbird: Integer overflow in the Libraries component in NSS
- CVE-2026-2780firefox: thunderbird: Privilege escalation in the Netmonitor component
- CVE-2026-2779firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component
- CVE-2026-2778firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
- CVE-2026-2777firefox: thunderbird: Privilege escalation in the Messaging System component
- CVE-2026-2776firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
- CVE-2026-2775firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component
- CVE-2026-2774firefox: thunderbird: Integer overflow in the Audio/Video component
- CVE-2026-2773firefox: thunderbird: Incorrect boundary conditions in the Web Audio component
- CVE-2026-2772firefox: thunderbird: Use-after-free in the Audio/Video: Playback component
- CVE-2026-2771firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component
- CVE-2026-2770firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-2769firefox: thunderbird: Use-after-free in the Storage: IndexedDB component
- CVE-2026-2768firefox: thunderbird: Sandbox escape in the Storage: IndexedDB component
- CVE-2026-2767firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-2766firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2765firefox: thunderbird: Use-after-free in the JavaScript Engine component
- CVE-2026-2764firefox: thunderbird: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2763firefox: thunderbird: Use-after-free in the JavaScript Engine component
- CVE-2026-2762firefox: thunderbird: Integer overflow in the JavaScript: Standard Library component
- CVE-2026-2761firefox: thunderbird: Sandbox escape in the Graphics: WebRender component
- CVE-2026-2760firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
- CVE-2026-2759firefox: thunderbird: Incorrect boundary conditions in the Graphics: ImageLib component
- CVE-2026-2758firefox: thunderbird: Use-after-free in the JavaScript: GC component
- CVE-2026-2757firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component
- CVE-2026-2739bn.js: bn.js: Denial of Service via calling maskn(0)
- CVE-2026-2708libsoup: libsoup: HTTP Request Smuggling via Duplicate Content-Length Headers
- CVE-2026-2673openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group
- CVE-2026-2641ctags: ctags: Denial of Service due to uncontrolled recursion
- CVE-2026-2625rust-rpm-sequoia: rust-rpm-sequoia: Denial of Service via crafted RPM file during signature verification
- CVE-2026-2604evolution-data-server: Evolution Data Server: Arbitrary file deletion via inconsistent URI handling
- CVE-2026-2581undici: Undici: Denial of Service due to uncontrolled resource consumption
- CVE-2026-2574glib-networking: glib-networking: Denial of Service and information disclosure via crafted TLS client-CA list
- CVE-2026-2447libvpx: Heap buffer overflow in libvpx
- CVE-2026-2443libsoup: Out-of-Bounds Read in libsoup handle_partial_get() Leading to Heap Information Disclosure