CVE 2026 document archive · 65
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 65 / 264
- CVE-2026-91410openjdk: Enhance zipfs (Oracle CPU 2026-10)
- CVE-2026-91409openjdk: Enhance QUIC connections (Oracle CPU 2026-10)
- CVE-2026-91403OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns
- CVE-2026-91400openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
- CVE-2026-91398openjdk: Enhance SOCKS5 support (Oracle CPU 2026-10)
- CVE-2026-91397openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)
- CVE-2026-91396openjdk: Improve Pack200 handling (Oracle CPU 2026-10)
- CVE-2026-91395openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10)
- CVE-2026-91394openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)
- CVE-2026-91382openjdk: Enhance Image Processing (Oracle CPU 2026-10)
- CVE-2026-91381openjdk: Enhance Font Rendering (Oracle CPU 2026-10)
- CVE-2026-91380openjdk: Enhance Preferences (Oracle CPU 2026-10)
- CVE-2026-91379openjdk: Enhance JShell (Oracle CPU 2026-10)
- CVE-2026-91375openjdk: Enhance jmod handling (Oracle CPU 2026-10)
- CVE-2026-91374openjdk: Enhance jstatd (Oracle CPU 2026-10)
- CVE-2026-91373openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)
- CVE-2026-91335openjdk: Enhance Image Handling (Oracle CPU 2026-10)
- CVE-2026-91334openjdk: Enhance JPEG loading (Oracle CPU 2026-10)
- CVE-2026-91333openjdk: Improve ciphertext handling (Oracle CPU 2026-10)
- CVE-2026-91332openjdk: Enhance HTTP Client (Oracle CPU 2026-10)
- CVE-2026-91205cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race
- CVE-2026-91203cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition
- CVE-2026-91202cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste
- CVE-2026-91149cockpit: Cockpit: Denial of Service via unbounded connection thread spawning
- CVE-2026-91147cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash
- CVE-2026-91142cockpit: Cockpit: Unauthorized modification of login records via integer overflow
- CVE-2026-91135thrift: Apache Thrift: Arbitrary code execution via heap-based buffer overflow during frame compression
- CVE-2026-91106hplip: heap-based buffer overflow can lead to remote code execution
- CVE-2026-91105hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities
- CVE-2026-91104hplip: heap-based buffer overflow can lead to remote code execution
- CVE-2026-91103hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service
- CVE-2026-91102HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution
- CVE-2026-91101hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities
- CVE-2026-91100hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.
- CVE-2026-91099hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation
- CVE-2026-91098hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation
- CVE-2026-91097hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation
- CVE-2026-90996sssd: sssd: Denial of Service in NSS responder via crafted zero-length requests
- CVE-2026-90995sssd: SSSD: Local denial of service due to NULL pointer dereference in PAM responder
- CVE-2026-90994sssd: sssd: Denial of Service via malformed PAM v1 requests
- CVE-2026-90949gimp: gimp: heap-based buffer overflow in PSP loader due to selection-channel geometry mismatch
- CVE-2026-90948gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions
- CVE-2026-90947gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file
- CVE-2026-90852com.github.luben/zstd-jni: luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing
- CVE-2026-90831binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table
- CVE-2026-90830binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge
- CVE-2026-90829binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation
- CVE-2026-90828binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function
- CVE-2026-90804binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service
- CVE-2026-90803binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation