PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 89

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 89 / 264

  1. CVE-2026-84128firefox: thunderbird: Privilege escalation in the WebDriver BiDi component
  2. CVE-2026-84127firefox: Firefox: Information disclosure in WebExtensions component
  3. CVE-2026-84126firefox: thunderbird: Incorrect boundary conditions in the Layout: Grid component
  4. CVE-2026-84125firefox: Firefox: Arbitrary code execution via use-after-free in DOM: Core & HTML
  5. CVE-2026-84124firefox: Use-after-free in the DOM: Core & HTML component
  6. CVE-2026-84123firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: WebGPU component
  7. CVE-2026-84122firefox: Use-after-free in the Audio/Video component
  8. CVE-2026-84121firefox: Sandbox escape due to use-after-free in the DOM: Security component
  9. CVE-2026-84120firefox: Use-after-free in the Audio/Video component
  10. CVE-2026-84119firefox: Sandbox escape due to use-after-free in the DOM: Navigation component
  11. CVE-2026-84118firefox: thunderbird: Use-after-free in the JavaScript: GC component
  12. CVE-2026-84117firefox: Privilege escalation in Firefox for Android
  13. CVE-2026-84042crun: crun: rootful krun with passt executes container payload as host root
  14. CVE-2026-84008dotnet: .NET Denial of Service Vulnerability
  15. CVE-2026-83663github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports
  16. CVE-2026-83632thrift: Apache Thrift: Denial of Service via crafted HTTP requests
  17. CVE-2026-83619@xmldom/xmldom: xmldom: Denial of Service via crafted XML input
  18. CVE-2026-83617@xmldom/xmldom: xmldom: XML injection via embedded line terminator in element/attribute names
  19. CVE-2026-83616xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets
  20. CVE-2026-83615xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption
  21. CVE-2026-83614xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic-time XML parsing
  22. CVE-2026-83613xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing
  23. CVE-2026-83611xmldom: xmldom: Malformed XML end tag parsing leads to content discard and security bypass
  24. CVE-2026-83610xmldom: @xmldom/xmldom: xmldom: XML fragment injection via invalid EntityReference serialization
  25. CVE-2026-83609@xmldom/xmldom: xmldom: Markup injection via embedded line terminators in XML names
  26. CVE-2026-83608xmldom: @xmldom/xmldom: xmldom: XML Markup Injection via DocType Name Bypass
  27. CVE-2026-83607xmldom: xmldom: Cross-site scripting via unvalidated element name injection
  28. CVE-2026-83606xmldom: @xmldom/xmldom: xmldom: Denial of Service via regular expression backtracking in processing instructions
  29. CVE-2026-83605xmldom: @xmldom/xmldom: xmldom: Attribute injection allows client-side script execution
  30. CVE-2026-83596webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature
  31. CVE-2026-83557com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation
  32. CVE-2026-83400openjdk: Enhance XML Processing (Oracle CPU 2026-10)
  33. CVE-2026-83395openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)
  34. CVE-2026-83387openjdk: Enhance WebRowSets (Oracle CPU 2026-10)
  35. CVE-2026-83381openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)
  36. CVE-2026-83380openjdk: Enhance LDAP logins (Oracle CPU 2026-10)
  37. CVE-2026-83378openjdk: Improve C2 loop transformations (Oracle CPU 2026-10)
  38. CVE-2026-83376openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)
  39. CVE-2026-83374openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)
  40. CVE-2026-82720unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup
  41. CVE-2026-82717unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis
  42. CVE-2026-82677valkey: Valkey: Denial of Service via double free in Module Timer subsystem
  43. CVE-2026-82631valkey: Valkey: Use-after-free vulnerability in Blocked-on-keys subsystem
  44. CVE-2026-82562qs: qs: Denial of Service via array limit bypass in query string parsing
  45. CVE-2026-82474sudo: Sudo: Policy bypass allows unauthorized program execution via execveat
  46. CVE-2026-82417qs: qs: Denial of Service via improper validation in stringify function
  47. CVE-2026-82397python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields
  48. CVE-2026-82343gimp: heap out-of-bounds read and stack out-of-bounds access in PSD loader from channel-count handling
  49. CVE-2026-82333multer: Multer: Denial of Service via oversized array index in field names
  50. CVE-2026-82330gimp: heap out-of-bounds read in PVR VQ (compressed) decoder due to missing bounds check
CVE 2026 document archive — Page 89 | PulseLinux