PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 53

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 53 / 264

  1. CVE-2026-95519rpm: Code Execution via Macro Expansion of Manifest Entries in `rpmgi` (`-q -p` / verify manifest flows)
  2. CVE-2026-95512freetype: FreeType: Denial of Service via repeated subroutine allocations in CID font loader
  3. CVE-2026-95508libslirp: libslirp: heap buffer overflow in DHCPv6/TFTP response builders on small interface MTU
  4. CVE-2026-95507libslirp: libslirp: out-of-bounds read in NC-SI OEM response handler discloses host memory to guest
  5. CVE-2026-95502grafana: grafana: Denial of Service via oversized Git Sync responses
  6. CVE-2026-95395wireshark: wireshark: Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissector
  7. CVE-2026-95393wireshark: Heap-based Buffer Overflow in Wireshark
  8. CVE-2026-95392wireshark: Buffer Over-read in Wireshark
  9. CVE-2026-95391wireshark: Use After Free in Wireshark
  10. CVE-2026-95390wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
  11. CVE-2026-95389wireshark: Heap-based Buffer Overflow in Wireshark
  12. CVE-2026-95388wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
  13. CVE-2026-95387wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector
  14. CVE-2026-95386wireshark: wireshark: Denial of Service via infinite loop in TTL file parser
  15. CVE-2026-95350chromium-browser: angle: Buffer overflow in ANGLE
  16. CVE-2026-95331chromium-browser: angle: Out of bounds write in ANGLE
  17. CVE-2026-95325chromium-browser: angle: Use after free in ANGLE
  18. CVE-2026-95284chromium-browser: angle: Buffer overflow in ANGLE
  19. CVE-2026-95281chromium-browser: angle: Buffer overflow in ANGLE
  20. CVE-2026-95101nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering
  21. CVE-2026-94640rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
  22. CVE-2026-94637github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data
  23. CVE-2026-94603podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation
  24. CVE-2026-94574wget: hardcoded configuration file writable by unprivileged users
  25. CVE-2026-94544next: Next.js: Information disclosure via shared cache fills in Draft Mode
  26. CVE-2026-94543next: Next.js: Response cache poisoning via improper route binding
  27. CVE-2026-94486next: Next.js: Information disclosure via unrestricted cross-site requests
  28. CVE-2026-94485next: Next.js: Information disclosure via unrestricted cross-site requests on development server
  29. CVE-2026-94484next: Next.js: Denial of Service via response cache poisoning
  30. CVE-2026-94483next: Next.js: Information disclosure via SSRF in Image Optimization
  31. CVE-2026-94482next: Next.js: Denial of Service via crafted requests targeting Server Actions
  32. CVE-2026-94453libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP
  33. CVE-2026-94448html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals
  34. CVE-2026-94447cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration
  35. CVE-2026-94444cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
  36. CVE-2026-94440net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
  37. CVE-2026-94439net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses
  38. CVE-2026-94422xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
  39. CVE-2026-94370qt-mcu: Qt: Memory corruption via improper string handling in Qt Quick Ultralite
  40. CVE-2026-94300bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay
  41. CVE-2026-94287libXpm: libXpm: Denial of Service via unsigned integer underflow
  42. CVE-2026-94286libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser
  43. CVE-2026-94285libX11: libX11: Denial of Service via out-of-bounds read in byte-oriented codeset parser
  44. CVE-2026-94284libX11: libX11: Denial of Service via out-of-bounds read in XIM trigger-key registration parser
  45. CVE-2026-94283libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parser
  46. CVE-2026-94282libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processing
  47. CVE-2026-94281libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()
  48. CVE-2026-94266curl: curl: password leak in CURLINFO_EFFECTIVE_URL
  49. CVE-2026-94265curl: curl: Authorization: Negotiate sent to foreign origin
  50. CVE-2026-94184fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01)
CVE 2026 document archive — Page 53 | PulseLinux