PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 55

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 55 / 264

  1. CVE-2026-93782kernel: vhost-scsi: flush backend after device ioctls
  2. CVE-2026-93781kernel: scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
  3. CVE-2026-93753deepmerge: deepmerge: Prototype Poisoning via mergeObject function
  4. CVE-2026-93750http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validation
  5. CVE-2026-93749source-map-js: source-map-js: Denial of Service via malformed indexed source maps
  6. CVE-2026-93748http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive
  7. CVE-2026-93690uri-js: uri-js: Denial of Service via malformed path segments
  8. CVE-2026-93683dpdk: dpdk: Guest-triggered out-of-bounds walk via vhost indirect descriptor length TOCTOU
  9. CVE-2026-93682php: php: Out-of-bounds read via empty HTTP redirect Location header
  10. CVE-2026-93676xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks
  11. CVE-2026-93657hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records
  12. CVE-2026-93653poppler: poppler: unbounded CPU loop in SplashOutputDev::tilingPatternFill via unvalidated tiling-pattern repeat count (denial of service)
  13. CVE-2026-93602rustls-webpki: rustls-webpki: Certificate Revocation Check Bypass via Faulty CRL Logic
  14. CVE-2026-93601rustls-webpki: rustls-webpki: Name Constraint Bypass in wildcard certificate validation
  15. CVE-2026-93600rustls-webpki: rustls-webpki: URI Name Constraint Bypass via X.509 Certificate Misissue
  16. CVE-2026-93599rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List
  17. CVE-2026-93590ImageMagick: ImageMagick: Denial of Service via UHDR encoder policy bypass
  18. CVE-2026-93589ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder
  19. CVE-2026-93588ImageMagick: ImageMagick: Denial of Service via Null Pointer Dereference in PNM Coder
  20. CVE-2026-93587ImageMagick: ImageMagick: Local user can cause denial of service via policy bypass in image decoders
  21. CVE-2026-93586ImageMagick: ImageMagick: Denial of Service via Use After Free in ImagesToBlob
  22. CVE-2026-93577ruby: integer overflow issue in regular expression compiler
  23. CVE-2026-93546httpd: httpd: Denial of Service via integer overflow in mod_dav_fs
  24. CVE-2026-93545libXi: libXi: Denial of Service via out-of-bounds read in XListInputDevices()
  25. CVE-2026-93544libXi: libXi: Denial of Service via out-of-bounds read in XIQueryDevice reply parsing
  26. CVE-2026-93543libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser
  27. CVE-2026-93542libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
  28. CVE-2026-93541libXi: Out-of-bounds read in libXi's XQueryDeviceState()
  29. CVE-2026-93536xorg-x11-server: xorg-x11-server: Denial of Service via use-after-free in gesture event handling
  30. CVE-2026-93524xorg-x11-server: xorg-x11-server: information disclosure via crafted keyboard mapping requests
  31. CVE-2026-93523xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice
  32. CVE-2026-93522xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes
  33. CVE-2026-93521xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests
  34. CVE-2026-93520xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling
  35. CVE-2026-93519xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()
  36. CVE-2026-93518xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize
  37. CVE-2026-93517xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow
  38. CVE-2026-93516xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling
  39. CVE-2026-93515xorg-x11-server: xorg-x11-server: Denial of Service via cross-window notification use-after-free
  40. CVE-2026-93479nginx: NGINX map directive and regex matching vulnerability
  41. CVE-2026-93446tomcat: Apache Tomcat: Possible TLS 1.3 connection failures
  42. CVE-2026-93433libstoragemgmt: libstoragemgmt: Denial of Service via stack buffer overflow in SCSI VPD page parsing
  43. CVE-2026-93402rsyslog: rsyslog: imdtls permitted-peer authorization bypass
  44. CVE-2026-93387chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation
  45. CVE-2026-93314poppler: Poppler: Remote integer overflow vulnerability
  46. CVE-2026-93313poppler: Poppler: Remote integer overflow vulnerability
  47. CVE-2026-93312poppler: Freedesktop Poppler: Denial of Service via null pointer dereference in JBIG2Stream::rewind function
  48. CVE-2026-93311poppler: Freedesktop Poppler: Denial of service via integer overflow in SampledFunction
  49. CVE-2026-93294grafana: Grafana: Information disclosure via Azure Monitor resource proxy
  50. CVE-2026-93288kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
CVE 2026 document archive — Page 55 | PulseLinux