CVE 2026 document archive · 263
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,113 documents · Identifier year 2026 · 263 / 263
- CVE-2026-0861glibc: Integer overflow in memalign leads to heap corruption
- CVE-2026-0818thunderbird: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
- CVE-2026-0810gix-date: gix-date: Undefined behavior due to invalid string generation
- CVE-2026-0799libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access
- CVE-2026-0797gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability
- CVE-2026-0775npmcli: npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2026-0719libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication
- CVE-2026-0716libsoup: Out-of-Bounds Read in libsoup WebSocket Frame Processing
- CVE-2026-0672cpython: Header injection in http.cookies.Morsel in Python
- CVE-2026-0665qemu-kvm: Heap off-by-one in KVM Xen PHYSDEVOP_map_pirq
- CVE-2026-0636bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java
- CVE-2026-0540DOMPurify: DOMPurify: Cross-site scripting vulnerability
- CVE-2026-0394dovecot: Dovecot: Information disclosure and authentication bypass via path traversal