PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 262

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,113 documents · Identifier year 2026 · 262 / 263

  1. CVE-2026-1584gnutls: gnutls: Remote Denial of Service via crafted ClientHello with invalid PSK binder
  2. CVE-2026-1539libsoup: libsoup: Credential leakage via HTTP redirects
  3. CVE-2026-1536libsoup: libsoup: HTTP header injection or response splitting via CRLF injection in Content-Disposition header
  4. CVE-2026-1528undici: undici: Denial of Service via crafted WebSocket frame with large length
  5. CVE-2026-1527undici: Undici: HTTP header injection and request smuggling vulnerability
  6. CVE-2026-1526undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression
  7. CVE-2026-1525undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers
  8. CVE-2026-1519bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone
  9. CVE-2026-1502python: Python: HTTP header injection via CR/LF in proxy tunnel headers
  10. CVE-2026-1489Glib: GLib: Memory corruption via integer overflow in Unicode case conversion
  11. CVE-2026-1485Glib: Glib: Local denial of service via buffer underflow in content type parsing
  12. CVE-2026-1484Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()
  13. CVE-2026-1467libsoup: libsoup: HTTP header injection via specially crafted URLs when an HTTP proxy is configured
  14. CVE-2026-1299cpython: email header injection due to unquoted newlines
  15. CVE-2026-1225ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes
  16. CVE-2026-1002io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files
  17. CVE-2026-0994python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
  18. CVE-2026-0992libxml2: libxml2: Denial of Service via crafted XML catalogs
  19. CVE-2026-0990libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing
  20. CVE-2026-0989libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow
  21. CVE-2026-0988glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()
  22. CVE-2026-0968libssh: libssh: Denial of Service due to malformed SFTP message
  23. CVE-2026-0967libssh: libssh: Denial of Service via inefficient regular expression processing
  24. CVE-2026-0966libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()
  25. CVE-2026-0965libssh: libssh: Denial of Service via improper configuration file handling
  26. CVE-2026-0964libssh: Improper sanitation of paths received from SCP servers
  27. CVE-2026-0962Wireshark: Wireshark: Denial of Service via SOME/IP-SD protocol dissector crash
  28. CVE-2026-0961Wireshark: Wireshark: Denial of Service vulnerability in BLF file parser
  29. CVE-2026-0960Wireshark: Wireshark: Denial of Service via HTTP3 protocol dissector infinite loop
  30. CVE-2026-0959Wireshark: Wireshark: Denial of service via IEEE 802.11 protocol dissector crash
  31. CVE-2026-0915glibc: glibc: Information disclosure via zero-valued network query
  32. CVE-2026-0908chromium-browser: angle: Use after free in ANGLE
  33. CVE-2026-0892firefox: thunderbird: Memory safety bugs fixed in Firefox 147 and Thunderbird 147
  34. CVE-2026-0891firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147
  35. CVE-2026-0890firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
  36. CVE-2026-0889firefox: Denial-of-service in the DOM: Service Workers component
  37. CVE-2026-0888firefox: Information disclosure in the XML component
  38. CVE-2026-0887firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component
  39. CVE-2026-0886firefox: thunderbird: Incorrect boundary conditions in the Graphics component
  40. CVE-2026-0885firefox: thunderbird: Use-after-free in the JavaScript: GC component
  41. CVE-2026-0884firefox: thunderbird: Use-after-free in the JavaScript Engine component
  42. CVE-2026-0883firefox: thunderbird: Information disclosure in the Networking component
  43. CVE-2026-0882firefox: thunderbird: Use-after-free in the IPC component
  44. CVE-2026-0881firefox: Sandbox escape in the Messaging System component
  45. CVE-2026-0880firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component
  46. CVE-2026-0879firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component
  47. CVE-2026-0878firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
  48. CVE-2026-0877firefox: thunderbird: Mitigation bypass in the DOM: Security component
  49. CVE-2026-0865cpython: wsgiref.headers.Headers allows header newline injection in Python
  50. CVE-2026-0864python: cpython: Python configparser: Configuration injection via crafted multi-line input
CVE 2026 document archive — Page 262 | PulseLinux