CVE 2026 document archive · 5

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,108 documents · Identifier year 2026 · 5 / 263

201. CVE-2026-117608assimp: assimp: Denial of Service via integer overflow in MD2 parser→
202. CVE-2026-117548389-ds-base: 389-ds-base: NULL pointer dereference via ModifyDN using an attribute's schema alias name causes denial of service→
203. CVE-2026-116797highcharts: Highcharts Grid Pro: Cross-site scripting via unsanitized column attributes→
204. CVE-2026-116796highcharts: highcharts: Arbitrary script execution via unsanitized SVG link attributes→
205. CVE-2026-116741speex: speex: Denial of Service via out-of-bounds write→
206. CVE-2026-116732libdwarf: libdwarf: Denial of Service via out-of-bounds read in dwarf_debug_addr_table→
207. CVE-2026-116724fltk: fltk: Arbitrary code execution via integer overflow in BMP image parsing→
208. CVE-2026-116723fltk: fltk: Arbitrary code execution via crafted BMP image file→
209. CVE-2026-116632firefox: Facetime protocol handler enabled spoofing→
210. CVE-2026-116631firefox: External protocol handler (tel:) address bar spoof→
211. CVE-2026-116620rapidjson: rapidjson: Denial of Service via out-of-bounds read in regex parser→
212. CVE-2026-116591github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input→
213. CVE-2026-116578tornado: tornado: Open redirect via crafted request paths in RedirectHandler URL templates→
214. CVE-2026-116577tornado: tornado: Denial of Service via obsolete HTTP header line folding→
215. CVE-2026-116497gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemon→
216. CVE-2026-116486org.objenesis/objenesis: objenesis: Type confusion via instantiator cache collisions→
217. CVE-2026-116262libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspector→
218. CVE-2026-116261libimobiledevice: libimobiledevice: Information disclosure via out-of-bounds read in AFC file handler→
219. CVE-2026-116260libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive→
220. CVE-2026-116259libimobiledevice: libimobiledevice: Memory corruption via crafted input in afc_get_device_info_key→
221. CVE-2026-116258libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in AFC→
222. CVE-2026-116160ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation→
223. CVE-2026-116159ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option→
224. CVE-2026-116158ImageMagick: ImageMagick: Denial of Service via memory leak in compare command→
225. CVE-2026-116157ImageMagick: ImageMagick: Denial of Service via memory leak in PerlMagick→
226. CVE-2026-116156ImageMagick: ImageMagick: Denial of Service via memory leak in -set profile option→
227. CVE-2026-116155ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak→
228. CVE-2026-116154ImageMagick: ImageMagick: Denial of Service via XML parsing memory leak→
229. CVE-2026-116153ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations→
230. CVE-2026-116152ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder→
231. CVE-2026-116151ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder→
232. CVE-2026-116150ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder→
233. CVE-2026-116149ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images→
234. CVE-2026-116148ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder→
235. CVE-2026-116147ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder→
236. CVE-2026-116146ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak→
237. CVE-2026-116144ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder→
238. CVE-2026-116143ImageMagick: ImageMagick: Denial of Service via scene selection policy bypass→
239. CVE-2026-116142ImageMagick: ImageMagick: Information disclosure via heap buffer over-read during minimum-bounding-box processing→
240. CVE-2026-116141ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder→
241. CVE-2026-116140ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing→
242. CVE-2026-116137adm-zip: adm-zip: File integrity check bypass via duplicate archive entries→
243. CVE-2026-116124libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser→
244. CVE-2026-115927tornado: Tornado: Denial of Service via chunked transfer encoding processing→
245. CVE-2026-115905zip2: zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE→
246. CVE-2026-115804github.com/hashicorp/consul: Consul: Authorization bypass via health check registration→
247. CVE-2026-115486open-iscsi: open-iscsi: IPv6 Neighbor Discovery missing option length validation in iscsiuio allows ARP table poisoning→
248. CVE-2026-115485open-iscsi: open-iscsi: DHCPv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio→
249. CVE-2026-115484open-iscsi: open-iscsi: DHCPv4 option parser heap out-of-bounds read in iscsiuio parse_msg→
250. CVE-2026-115456gcc: Out-of-bounds read in std::from_chars→