PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 86

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 86 / 264

  1. CVE-2026-87654chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE
  2. CVE-2026-87648chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free
  3. CVE-2026-87621chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability
  4. CVE-2026-87604chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read
  5. CVE-2026-87602chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page
  6. CVE-2026-87596chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read
  7. CVE-2026-87586chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page
  8. CVE-2026-87512chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE
  9. CVE-2026-87500chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
  10. CVE-2026-87367openjdk: Enhance Template Handling (Oracle CPU 2026-10)
  11. CVE-2026-87294openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10)
  12. CVE-2026-87293openjdk: Enhance RMI connections (Oracle CPU 2026-10)
  13. CVE-2026-87292openjdk: Enhance Network Clients (Oracle CPU 2026-10)
  14. CVE-2026-87291openjdk: Enhance HTTP Server (Oracle CPU 2026-10)
  15. CVE-2026-87290openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)
  16. CVE-2026-87255openjdk: Enhance Vector Processing (Oracle CPU 2026-10)
  17. CVE-2026-87029undici: undici: Denial of Service via unhandled exception in decompress interceptor
  18. CVE-2026-87022tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling
  19. CVE-2026-87018undici: undici: Denial of Service via TLS renegotiation with mismatched certificate
  20. CVE-2026-86922webkitgtk: WebKitGTK: Arbitrary code execution via type confusion
  21. CVE-2026-86856dpdk: dpdk: Stack and heap buffer overflow in nfp vDPA driver
  22. CVE-2026-86849dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
  23. CVE-2026-86848dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto
  24. CVE-2026-86847dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup
  25. CVE-2026-86846dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto
  26. CVE-2026-86845dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
  27. CVE-2026-86818fast-uri: fast-uri: Mailto header injection via percent-encoded field-name desynchronization
  28. CVE-2026-86805glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
  29. CVE-2026-86567dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap
  30. CVE-2026-86566dpdk: dpdk: Guest with runt RX descriptors underflows copy length in vhost enqueue (split and packed rings)
  31. CVE-2026-86565dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
  32. CVE-2026-86564dpdk: dpdk: Missing length validation before reading command_data in virtio-net control queue handler
  33. CVE-2026-86563dpdk: dpdk: Double offset bug in vhost log mapping calculation
  34. CVE-2026-86562dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE)
  35. CVE-2026-86561dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup
  36. CVE-2026-86476gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize
  37. CVE-2026-86472fast-uri: fast-uri: Security bypass due to inconsistent host case normalization
  38. CVE-2026-86469glib2: TOCTOU Symlink Race in `G_FILE_CREATE_REPLACE_DESTINATION` Fallback Path
  39. CVE-2026-86425ImageMagick: PerlMagick: ImageMagick: Denial of Service due to heap-use-after-free vulnerability
  40. CVE-2026-86424ImageMagick: ImageMagick: Local attacker can modify files via TOCTOU symlink race
  41. CVE-2026-86423ImageMagick: ImageMagick: Denial of service via heap-use-after-free in PerlMagick's GetList method
  42. CVE-2026-86422ImageMagick: ImageMagick: Information disclosure and modification via TOCTOU symlink race on Windows
  43. CVE-2026-86421ImageMagick: ImageMagick: Denial of Service via memory leak in MSL decoder
  44. CVE-2026-86420ImageMagick: ImageMagick: Denial of Service due to memory budget exhaustion
  45. CVE-2026-86415curl: curl: auto client cert connection reuse mixup
  46. CVE-2026-86414curl: curl: leaking host credentials to HTTP proxy
  47. CVE-2026-86413curl: curl: Negotiate credentials sent to redirected origin
  48. CVE-2026-86412curl: curl: server-set cookie erases cookie jar
  49. CVE-2026-86411curl: curl: FTP connection reuse inherits client-certificate
  50. CVE-2026-86410curl: curl: redirect to SFTP or SCP bypasses host verification
CVE 2026 document archive — Page 86 | PulseLinux