CVE 2026 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,108 documents · Identifier year 2026 · 6 / 263

251. CVE-2026-115455gcc: Stack overflow in std::bitset on libstdc++→
252. CVE-2026-115449libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guest→
253. CVE-2026-115327libyang: libyang: Denial of Service via crafted NETCONF RPC action envelope→
254. CVE-2026-115221ipa: freeIPA: FreeIPA uses subject CN as proof of certificate ownership→
255. CVE-2026-115207patch: Filename validation bypass in reversal fallback allows file creation outside the working directory→
256. CVE-2026-114820OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns→
257. CVE-2026-114691gcc: Integer wrap in `std→
258. CVE-2026-114690gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std→
259. CVE-2026-114613msgpack: msgpack: Denial of Service via memory leak during map deserialization→
260. CVE-2026-114605dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal→
261. CVE-2026-114501pillow: Pillow: Information disclosure via improper memory alignment during Arrow export→
262. CVE-2026-114437github.com/go-chi/chi: chi: client IP spoofing via unverified direct connection in ClientIPFromXFF middleware→
263. CVE-2026-114406ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns→
264. CVE-2026-114370undertow: undertow: PathResourceManager safePaths check allows sibling-directory symlink traversal→
265. CVE-2026-114236podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers→
266. CVE-2026-114148dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability→
267. CVE-2026-114126storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token→
268. CVE-2026-114125storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions→
269. CVE-2026-114105adm-zip: adm-zip: Privilege escalation via unmasked permissions during archive extraction→
270. CVE-2026-114104adm-zip: adm-zip: Content validation bypass via duplicate archive entry names→
271. CVE-2026-114103adm-zip: adm-zip: Denial of Service via decompression bomb protection bypass in asynchronous extraction→
272. CVE-2026-114102adm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression→
273. CVE-2026-114098dulwich: Dulwich: Arbitrary code execution via symlink directory traversal during stash pop→
274. CVE-2026-114097dulwich: dulwich: Arbitrary code execution via symlink path traversal during branch filtering→
275. CVE-2026-114096dulwich: dulwich: Arbitrary code execution via symlink following during file checkout→
276. CVE-2026-114095dulwich: dulwich: Denial of Service via self-referential packfile delta objects→
277. CVE-2026-114094dulwich: Dulwich: Arbitrary code execution via unvalidated drive letters in repository paths→
278. CVE-2026-114047freerdp: FreeRDP: proxy improper TLS certificate validation allows target impersonation→
279. CVE-2026-114046freerdp: FreeRDP: null pointer dereference in smartcard emulation via crafted reader name→
280. CVE-2026-114045freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats→
281. CVE-2026-114044freerdp: FreeRDP: Android client heap out-of-bounds read via graphics pipeline→
282. CVE-2026-114043freerdp: FreeRDP: heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis→
283. CVE-2026-114042freerdp: FreeRDP: use-after-free in drdynvc virtual channel PDU handling→
284. CVE-2026-114041freerdp: FreeRDP: Windows RD Gateway consent message heap out-of-bounds read→
285. CVE-2026-114038device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format string→
286. CVE-2026-113869thunderbird: Use-after-free in S/MIME decryption during a security device password prompt→
287. CVE-2026-113868thunderbird: Thunderbird: information disclosure via malformed authentication challenge→
288. CVE-2026-113867thunderbird: thunderbird: Unauthorized actions via XMPP stanza injection→
289. CVE-2026-113866thunderbird: thunderbird: Information disclosure via unencrypted AutoDiscover lookup→
290. CVE-2026-113812perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates→
291. CVE-2026-113496cockpit-machines: cockpit-appstream: VNC console password disclosure through virt-xml command-line arguments→
292. CVE-2026-113495cockpit-machines: cockpit-appstream: RHSM access-token disclosure through image helper command-line arguments→
293. CVE-2026-113470firefox: Firefox: Website spoofing via failure to block compromised intermediate certificates→
294. CVE-2026-113351expat: expat: Denial of Service via improper memory tracking in XML_ParserReset→
295. CVE-2026-113341chromium-browser: skia: Memory corruption in Skia→
296. CVE-2026-113340chromium-browser: angle: Memory corruption in ANGLE→
297. CVE-2026-113334chromium-browser: angle: Improper input validation in ANGLE→
298. CVE-2026-113315chromium-browser: angle: Memory corruption in ANGLE→
299. CVE-2026-113295chromium-browser: angle: Out of bounds read in ANGLE→
300. CVE-2026-113293chromium-browser: angle: Use after free in ANGLE→