CVE 2026 document archive · 62
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 62 / 264
- CVE-2026-92482kernel: pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
- CVE-2026-92481kernel: pinctrl: mediatek: free EINT resources on unbind
- CVE-2026-92480kernel: scsi: ufs: core: Validate string descriptors
- CVE-2026-92479kernel: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags
- CVE-2026-92478kernel: scsi: ufs: core: Validate connected lane counts
- CVE-2026-92477kernel: scsi: ufs: debugfs: Reserve space for a string terminator
- CVE-2026-92476kernel: crypto: keembay - Initialize completion before requesting IRQ
- CVE-2026-92392curl: curl: HTTP/2 upload Use-After-Free
- CVE-2026-92391curl: curl: curl_mime_free stack overflow by recursion
- CVE-2026-92390curl: curl: -J no-clobber guarantee bypassed with 103 early hints
- CVE-2026-92389curl: curl: TFTP direction confusion
- CVE-2026-92388curl: curl: FTP wildcard write callback mixup
- CVE-2026-92387curl: curl: never-ending loop via server response omission
- CVE-2026-92386curl: curl: server-set cookie aborts cookie jar load
- CVE-2026-92382usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write
- CVE-2026-92262mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
- CVE-2026-92248gimp: integer overflow when generating a thumbnail preview for a PSD file
- CVE-2026-92240thunderbird: Out-of-bounds read in IMAP response parser
- CVE-2026-92239thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line
- CVE-2026-92238thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers
- CVE-2026-92183gimp: gimp: Arbitrary code execution via stack-based buffer overflow in APNG parser
- CVE-2026-92162flatpak: Flatpak: Local privilege escalation via crafted architecture name
- CVE-2026-92091jwcrypto: jwcrypto: denial of service via O(n^2) duplicate check on unbounded JWK key_ops array
- CVE-2026-92079firefox: thunderbird: Mitigation bypass in the Widget: Win32 component
- CVE-2026-92078firefox: thunderbird: Denial-of-service in the Security component
- CVE-2026-92077firefox: thunderbird: Denial-of-service in the SVG component
- CVE-2026-92076firefox: thunderbird: Incorrect boundary conditions in the Networking component
- CVE-2026-92075firefox: thunderbird: Mitigation bypass in the Networking component
- CVE-2026-92074firefox: thunderbird: Mitigation bypass in the Popup Blocker component
- CVE-2026-92073firefox: thunderbird: Privilege escalation in the Enterprise Policies component
- CVE-2026-92072firefox: thunderbird: Incorrect boundary conditions in the Safe Browsing component
- CVE-2026-92071firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92070firefox: thunderbird: Information disclosure in the Networking component
- CVE-2026-92069firefox: thunderbird: Spoofing issue in the DOM: Navigation component
- CVE-2026-92068firefox: Site isolation issue in the Reader Mode component
- CVE-2026-92067firefox: thunderbird: Use-after-free in the Widget: Gtk component
- CVE-2026-92066firefox: thunderbird: Sandbox escape in the Profile Backup component
- CVE-2026-92065firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92064firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-92063firefox: thunderbird: Denial-of-service in the Audio/Video component
- CVE-2026-92062firefox: thunderbird: Privilege escalation in the Session Restore component
- CVE-2026-92061firefox: thunderbird: Incorrect boundary conditions in the Security: Process Sandboxing component
- CVE-2026-92060firefox: thunderbird: Use-after-free in the Internationalization component
- CVE-2026-92059firefox: thunderbird: Incorrect boundary conditions in the DOM: Editor component
- CVE-2026-92058firefox: thunderbird: Use-after-free in the Graphics component
- CVE-2026-92057firefox: thunderbird: Mitigation bypass in the Enterprise Policies component
- CVE-2026-92056firefox: thunderbird: Use-after-free in the Graphics: Text component
- CVE-2026-92055firefox: thunderbird: Privilege escalation in the DevTools component
- CVE-2026-92054firefox: thunderbird: Privilege escalation in the Memory component
- CVE-2026-92053firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component