PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 52

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 52 / 264

  1. CVE-2026-96643pillow: pillow: Denial of Service via repeated EXIF headers
  2. CVE-2026-96642pillow: Pillow: Denial of Service via negative archive member size in TarIO
  3. CVE-2026-96641pillow: pillow: Denial of Service via integer overflow in text-width calculation
  4. CVE-2026-96640pillow: pillow: Denial of Service via duplicate page references in PDF files
  5. CVE-2026-96639pillow: Pillow multi-frame loaders can reuse stale native image storage after mode transitions
  6. CVE-2026-96638pillow: pillow: Denial of Service via crafted RLE BMP image
  7. CVE-2026-96637pillow: pillow: Denial of Service via decompression bomb bypass in SPIDER images
  8. CVE-2026-96636pillow: pillow: Denial of Service via decompression bomb check bypass in multi-frame images
  9. CVE-2026-96618hex: hex: Denial of Service via unconstrained data decompression
  10. CVE-2026-96546gimp: gimp: one-byte out-of-bounds heap read in the uncompressed DDS loader
  11. CVE-2026-96545gimp: gimp: out-of-bounds heap read in the 4bpp TIM image loader
  12. CVE-2026-96544gimp: gimp: integer overflow in the PVR image loader leads to an out-of-bounds heap read
  13. CVE-2026-96543gimp: gimp: out-of-bounds heap write when loading non-square PVR images
  14. CVE-2026-96541gnome-remote-desktop: gnome-remote-desktop: unauthenticated RDP sockets lack a handshake deadline
  15. CVE-2026-96512sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
  16. CVE-2026-96442emacs: Emacs: arbitrary code execution in Flymake mode
  17. CVE-2026-96423wireshark: Heap-based Buffer Overflow in Wireshark
  18. CVE-2026-96422wireshark: Reachable Assertion in Wireshark
  19. CVE-2026-96421wireshark: Wireshark: Denial of Service via USB HID dissector infinite loop
  20. CVE-2026-96420wireshark: Buffer Over-read in Wireshark
  21. CVE-2026-96419wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
  22. CVE-2026-96418wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
  23. CVE-2026-96417wireshark: wireshark: Denial of Service via malformed RF4CE packet
  24. CVE-2026-96416wireshark: Wireshark: Denial of Service via malformed IEEE 802.11 packet processing
  25. CVE-2026-96415wireshark: Stack-based Buffer Overflow in Wireshark
  26. CVE-2026-96284flatpak: flatpak: Arbitrary read-access to files in the system-helper context via OCI symlink following
  27. CVE-2026-96283flatpak: flatpak: flatpak-system-helper cross-user CancelPull orphans another user's ongoing pull
  28. CVE-2026-96282flatpak: flatpak: Extension metadata path traversal file existence oracle
  29. CVE-2026-96281flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimes
  30. CVE-2026-96280flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems
  31. CVE-2026-96279flatpak: flatpak: Path traversal issue in OCI archive extraction via hardlinks
  32. CVE-2026-96276flatpak: flatpak: Arbitrary write in host context via flatpak build-init
  33. CVE-2026-96275flatpak: flatpak: Arbitrary write access as root via extra-data extraction
  34. CVE-2026-96269emacs: GNU Emacs: Arbitrary code execution upon opening a file
  35. CVE-2026-96238dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability
  36. CVE-2026-96237dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability
  37. CVE-2026-96236dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability
  38. CVE-2026-96233dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability
  39. CVE-2026-96232dotnet: .NET: Information disclosure via out-of-bounds read
  40. CVE-2026-96231dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability
  41. CVE-2026-96230dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability
  42. CVE-2026-96225dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability
  43. CVE-2026-96222dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
  44. CVE-2026-95832kitty: Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell
  45. CVE-2026-95818glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
  46. CVE-2026-95702gvisor.dev/gvisor: gVisor: Arbitrary code execution via use-after-free in VFS
  47. CVE-2026-95622ModemManager: ModemManager: Reachable assertion in Cell Broadcast encoding parse causes denial of service
  48. CVE-2026-95619gcc: libstdc++ integer overflow in `new` operator
  49. CVE-2026-95521rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source RPM
  50. CVE-2026-95520rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packages
CVE 2026 document archive — Page 52 | PulseLinux