PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 88

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 88 / 264

  1. CVE-2026-84961undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options
  2. CVE-2026-84947undici: Undici: Response truncation and connection termination
  3. CVE-2026-84933undici: undici: Cross-user cookie disclosure via Set-Cookie caching
  4. CVE-2026-84890undici: undici: Denial of Service via unbounded decompression of compressed responses
  5. CVE-2026-84838rpm: Command injection in rpmuncompress via unescaped filenames passed to popen()
  6. CVE-2026-84837rpm: Command Injection in `rpmbuild -t*` (`getTarSpec`) via Unescaped Tarball Path
  7. CVE-2026-84828pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
  8. CVE-2026-84823org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor role
  9. CVE-2026-84784openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog
  10. CVE-2026-84783openssl: openssl: Denial of Service via race condition in certificate extension caching
  11. CVE-2026-84782openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission
  12. CVE-2026-84642thunderbird: Allowed UNC hostnames for attachments interpreted as a regular expression
  13. CVE-2026-84641thunderbird: Information disclosure due to malicious IMAP server response
  14. CVE-2026-84640thunderbird: One byte overflow read in mail parser
  15. CVE-2026-84639thunderbird: Uninitialized memory in MIME parsing
  16. CVE-2026-84637thunderbird: Thunderbird: Arbitrary code execution via malicious calendar invitation attachments
  17. CVE-2026-84635webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination
  18. CVE-2026-84445google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests
  19. CVE-2026-84394fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies
  20. CVE-2026-84375js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing
  21. CVE-2026-84370svgo: SVGO: Arbitrary script execution via incomplete executable link filtering
  22. CVE-2026-84369svgo: SVGO: Cross-Site Scripting (XSS) vulnerability in SVG foreignObject processing
  23. CVE-2026-84368joi: @hapi/joi: joi: Prototype pollution via untrusted input in schema configuration
  24. CVE-2026-84367joi: joi: Prototype pollution via dynamic key renaming
  25. CVE-2026-84359chromium-browser: skia: chromium-browser: Information leak in Skia
  26. CVE-2026-84292fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization
  27. CVE-2026-84270gvfs: MTP: out-of-bounds read in do_read()
  28. CVE-2026-84269gvfs: AFP: heap-based buffer overflow in DSI read path
  29. CVE-2026-84268gvfs: SFTP: heap-based buffer overflow in read_reply()
  30. CVE-2026-84267gvfs: SFTP: uninitialized heap disclosure in read_string()
  31. CVE-2026-84243glibc: glibc: Arbitrary code execution via directory traversal in LANGUAGE environment variable
  32. CVE-2026-84233rpm: Command Execution via Macro Expansion in `rpmuncompress -x` for Crafted `.gem` Filenames
  33. CVE-2026-84185jwcrypto: jwcrypto: General JSON JWS kid binding bypass during JWKSet verification
  34. CVE-2026-84145firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40
  35. CVE-2026-84144firefox: thunderbird: Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2
  36. CVE-2026-84143firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15
  37. CVE-2026-84142firefox: thunderbird: Internally found bugs fixed in Firefox 155
  38. CVE-2026-84141firefox: thunderbird: Integer overflow in the Graphics: ImageLib component
  39. CVE-2026-84140firefox: thunderbird: Site isolation issue in the DOM: Navigation component
  40. CVE-2026-84139firefox: thunderbird: Clickjacking issue in the DOM: Events component
  41. CVE-2026-84138firefox: thunderbird: Denial-of-service in the PDF Viewer component
  42. CVE-2026-84137firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component
  43. CVE-2026-84136firefox: thunderbird: Other issue in the DOM: Navigation component
  44. CVE-2026-84135firefox: Other issue in Firefox Focus for Android
  45. CVE-2026-84134firefox: thunderbird: Other issue in the Profile Backup component
  46. CVE-2026-84133firefox: thunderbird: Site isolation issue in the DOM: Push Subscriptions component
  47. CVE-2026-84132firefox: thunderbird: Information disclosure in the Networking: HTTP component
  48. CVE-2026-84131firefox: Privilege escalation due to invalid pointer in the Graphics component
  49. CVE-2026-84130firefox: thunderbird: Information disclosure in the Graphics: WebGPU component
  50. CVE-2026-84129firefox: thunderbird: Site isolation issue in the DOM: Navigation component
CVE 2026 document archive — Page 88 | PulseLinux