PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 8

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,125 documents · Identifier year 2026 · 8 / 263

  1. CVE-2026-112283libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parse
  2. CVE-2026-112282libbluray: libbluray: Denial of Service via out-of-bounds read in clpi_access_point()
  3. CVE-2026-112276netpbm: netpbm: Denial of Service via out-of-bounds read in rasttopnm
  4. CVE-2026-112275netpbm: netpbm: Denial of Service via heap-based buffer overflow in rasttopnm
  5. CVE-2026-112261gimp: gimp: use-after-free in XCF loader via PROP_SELECTED_PATH
  6. CVE-2026-112260gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing
  7. CVE-2026-112259gimp: gimp: NULL pointer dereference in SwatchBooker (SBZ) palette import
  8. CVE-2026-112258gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels
  9. CVE-2026-112257gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033)
  10. CVE-2026-112214gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
  11. CVE-2026-112177ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8
  12. CVE-2026-112058libdvdnav: libdvdnav: Denial of Service via out-of-bounds read in set_PTT
  13. CVE-2026-112057libdvdnav: libdvdnav: Denial of Service via crafted disc image
  14. CVE-2026-112027cms: light0011 cms: Information disclosure via filename manipulation in Uploadify
  15. CVE-2026-112026cms: light0011 cms: Information disclosure via weak password hashing
  16. CVE-2026-112008libmng: libmng: Denial of Service via heap-based buffer overflow in mng_read_ordr()
  17. CVE-2026-111943crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
  18. CVE-2026-111881freerdp: freerdp: Denial of Service via crafted clipboard bitmap image
  19. CVE-2026-111880freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication
  20. CVE-2026-111879perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error
  21. CVE-2026-111802nautilus: nautilus: Arbitrary File Deletion via Trash Symlink
  22. CVE-2026-111752@angular/router: @angular/router: Denial of Service via improper route outlet matching in Server-Side Rendering
  23. CVE-2026-111751@angular/router: @angular/router: Denial of Service via query parameter memory retention during server-side rendering
  24. CVE-2026-111581libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method
  25. CVE-2026-111555luksmeta: Missing slot-range validation permits out-of-gap device I/O
  26. CVE-2026-111497brotli: Out-of-Bounds Write in Google Brotli Decoder
  27. CVE-2026-111487qt3d: qt: arbitrary code execution via out-of-bounds write in Qt3D assimp plugin
  28. CVE-2026-111382freerdp: freerdp: Arbitrary code execution via crafted display frames
  29. CVE-2026-111381freerdp: freerdp: Arbitrary code execution via crafted persistent cache file
  30. CVE-2026-111380freerdp: FreeRDP: Arbitrary code execution via integer overflow in audio input buffer calculation
  31. CVE-2026-111379freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file
  32. CVE-2026-111378freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser
  33. CVE-2026-111377freerdp: FreeRDP: Denial of Service via unbounded static channel reassembly
  34. CVE-2026-111376freerdp: freerdp: Denial of Service via short clipboard response
  35. CVE-2026-111375freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window title
  36. CVE-2026-111374freerdp: freerdp: Denial of Service via unadvertised camera stream requests
  37. CVE-2026-111373freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping
  38. CVE-2026-111272LibRaw: LibRaw: Denial of Service via heap-based out-of-bounds read in Nikon metadata parser
  39. CVE-2026-111269libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()
  40. CVE-2026-111183gstreamer: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
  41. CVE-2026-111157sox: sox: Denial of Service via crafted WAV file
  42. CVE-2026-111142zziplib: zziplib: Denial of Service via out-of-bounds read in ZIP central directory parsing
  43. CVE-2026-111141zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing
  44. CVE-2026-111137libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()
  45. CVE-2026-111132libgxps: libgxps: Denial of Service via crafted XPS document
  46. CVE-2026-111129assimp: assimp: Denial of Service via invalid animation track targets
  47. CVE-2026-111128assimp: assimp: Denial of Service via NULL pointer dereference in Ogre3D importer
  48. CVE-2026-111079goose: goose: Shell History and Environment Leak via Terminal Integration
  49. CVE-2026-110929openssh: openssh: post-authentication process retains root without file-descriptor passing
  50. CVE-2026-110928openssh: openssh: authorized_keys restrict does not apply to tunnel forwarding
CVE 2026 document archive — Page 8 | PulseLinux