CVE 2026 document archive · 3
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,093 documents · Identifier year 2026 · 3 / 262
- CVE-2026-118354chromium-browser: skia: Improper input validation in Skia
- CVE-2026-118351chromium-browser: skia: Memory corruption in Skia
- CVE-2026-118348chromium-browser: skia: Improper input validation in Skia
- CVE-2026-118340chromium-browser: skia: Memory corruption in Skia
- CVE-2026-118329chromium-browser: angle: Improper input validation in ANGLE
- CVE-2026-118322chromium-browser: angle: Memory corruption in ANGLE
- CVE-2026-118319chromium-browser: skia: Memory corruption in Skia
- CVE-2026-118251highcharts: Highcharts: Cross-site scripting via unvalidated credits link
- CVE-2026-118246highcharts: Highcharts: Cross-site scripting via unfiltered breadcrumb style attributes
- CVE-2026-118244highcharts: Highcharts: Cross-site scripting via unsanitized markup fallback during chart redraw
- CVE-2026-118242highcharts: highcharts: Cross-site scripting via unsanitized grid icon attributes
- CVE-2026-118180thunderbird: Matrix homeserver could redirect the chat session to a local file or network share
- CVE-2026-118179thunderbird: Request forgery via news: links
- CVE-2026-118177thunderbird: Calendar discovery accepted local file and remote network share locations
- CVE-2026-118176thunderbird: Bypass of remote UNC path restriction in mailbox: URLs
- CVE-2026-118175thunderbird: Content of other messages could be included when replying to a crafted message
- CVE-2026-118174thunderbird: Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment
- CVE-2026-118027firefox: Frame poisoning in the Layout component
- CVE-2026-118026firefox: thunderbird: Invalid pointer in the JavaScript: GC component
- CVE-2026-118025firefox: thunderbird: Other issue in the SVG component
- CVE-2026-118024firefox: thunderbird: Use-after-free in the Graphics: Text component
- CVE-2026-118023firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: WebRender component
- CVE-2026-118022firefox: Sandbox escape due to use-after-free in the Disability Access APIs component
- CVE-2026-118021firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component
- CVE-2026-118020firefox: thunderbird: Use-after-free in the Layout component
- CVE-2026-118019firefox: thunderbird: Race condition, use-after-free in the DOM: File component
- CVE-2026-118018firefox: Spoofing issue in the Downloads component in Firefox for Android
- CVE-2026-118017firefox: thunderbird: Use-after-free in the SVG component
- CVE-2026-118016firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
- CVE-2026-118015firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
- CVE-2026-118014firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-118013firefox: thunderbird: Use-after-free in the Layout: Images, Video, and HTML Frames component
- CVE-2026-118012firefox: thunderbird: Use-after-free in the DOM: Animation component
- CVE-2026-118011firefox: thunderbird: Frame poisoning in the CSS Parsing and Computation component
- CVE-2026-118010firefox: thunderbird: Use-after-free in the Disability Access APIs component
- CVE-2026-118009firefox: thunderbird: Integer overflow, use-after-free in the Graphics: Text component
- CVE-2026-118008firefox: thunderbird: Privilege escalation in the DOM: Navigation component
- CVE-2026-118007firefox: thunderbird: Use-after-free in the JavaScript: GC component
- CVE-2026-118006firefox: Privilege escalation due to use-after-free in the WebRTC: Signaling component
- CVE-2026-118005firefox: thunderbird: Use-after-free in the WebRTC: Signaling component
- CVE-2026-117997firefox: thunderbird: Sandbox escape due to use-after-free in the Widget component
- CVE-2026-117988firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- CVE-2026-117987firefox: thunderbird: Use-after-free in the Graphics component
- CVE-2026-117986firefox: thunderbird: Use-after-free in the Graphics component
- CVE-2026-117985firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics component
- CVE-2026-117980firefox: thunderbird: Use-after-free in the Graphics component
- CVE-2026-117974firefox: thunderbird: Use-after-free in the XML component
- CVE-2026-117973firefox: thunderbird: Use-after-free in the Networking: DNS component
- CVE-2026-117971firefox: thunderbird: Sandbox escape due to use-after-free in the Print Preview component
- CVE-2026-117965firefox: thunderbird: Same-origin policy bypass in the Address Bar component