PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 64

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 64 / 264

  1. CVE-2026-91991tornado: Tornado: Cookie attribute injection via capitalized keyword arguments
  2. CVE-2026-91990tornado: Tornado: Denial of Service via memory amplification in multipart parsing
  3. CVE-2026-91986gix-transport: gix-transport: Information disclosure and virtual host spoofing via control character injection
  4. CVE-2026-91964FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU
  5. CVE-2026-91963FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure
  6. CVE-2026-91962FreeRDP: FreeRDP: Remote out-of-bounds access via integer overflow in audin Apple backends
  7. CVE-2026-91961FreeRDP: FreeRDP: Denial of Service via URBDRC control-transfer request with invalid OutputBufferSize
  8. CVE-2026-91960FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR
  9. CVE-2026-91959FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway
  10. CVE-2026-91958FreeRDP: FreeRDP: Denial of service and potential code execution via malicious RDP file
  11. CVE-2026-91957FreeRDP: FreeRDP: Use-after-free vulnerability in smartcard RDPDR device handler leading to denial of service or potential code execution
  12. CVE-2026-91956FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel
  13. CVE-2026-91955FreeRDP: FreeRDP: Denial of Service via crafted desktop dimensions
  14. CVE-2026-91954FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command
  15. CVE-2026-91953FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.
  16. CVE-2026-91952FreeRDP: FreeRDP: Denial of Service via crafted AVC444 graphics updates
  17. CVE-2026-91951FreeRDP: FreeRDP: Denial of Service via out-of-bounds write in urbdrc client channel
  18. CVE-2026-91950FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure
  19. CVE-2026-91949freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
  20. CVE-2026-91948FreeRDP: FreeRDP: Arbitrary code execution via oversized channel messages in SHOW_PROTOCOL
  21. CVE-2026-91947FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption
  22. CVE-2026-91946FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU
  23. CVE-2026-91945FreeRDP: FreeRDP: Denial of Service due to out-of-bounds read in smartcard response processing
  24. CVE-2026-91926gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated AV_PAIR entries in NTLM CHALLENGE
  25. CVE-2026-91920undertow: undertow: ChunkReader message length permits chunk-size overflow
  26. CVE-2026-91786gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size
  27. CVE-2026-91777com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion
  28. CVE-2026-91776jackson-databind: com.fasterxml.jackson/jackson-core: jackson-databind: Denial of Service via unbounded cache growth in TypeDeserializerBase
  29. CVE-2026-91769php: php: Server impersonation via Common Name fallback in TLS verification
  30. CVE-2026-91768php: php: Access control bypass via partial IPv6 address comparison
  31. CVE-2026-91767php: php: Information disclosure via crafted TLS server certificate
  32. CVE-2026-91766php: php: Credential disclosure via cross-origin HTTP redirects
  33. CVE-2026-91765php: php: Denial of Service via unbounded recursion in SOAP parser
  34. CVE-2026-91747chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability
  35. CVE-2026-91740chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia
  36. CVE-2026-91738chromium-browser: angle: chromium-browser: Improper input validation in ANGLE
  37. CVE-2026-91733chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation
  38. CVE-2026-91720chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE
  39. CVE-2026-91487openjdk: Enhance C2 comparisons (Oracle CPU 2026-10)
  40. CVE-2026-91464openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)
  41. CVE-2026-91463openjdk: Enhance krb5 client (Oracle CPU 2026-10)
  42. CVE-2026-91462openjdk: Enhance krb5 tokens (Oracle CPU 2026-10)
  43. CVE-2026-91461openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)
  44. CVE-2026-91453openjdk: Improve HTTP headers (Oracle CPU 2026-10)
  45. CVE-2026-91452openjdk: Enhance HTTP server (Oracle CPU 2026-10)
  46. CVE-2026-91451openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10)
  47. CVE-2026-91418openjdk: Enhance GIF loading (Oracle CPU 2026-10)
  48. CVE-2026-91417openjdk: Enhance CORBA (Oracle CPU 2026-10)
  49. CVE-2026-91415openjdk: Enhance font rendering (Oracle CPU 2026-10)
  50. CVE-2026-91411openjdk: Enhance JGSS (Oracle CPU 2026-10)
CVE 2026 document archive — Page 64 | PulseLinux