PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 9

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,143 documents · Identifier year 2026 · 9 / 263

  1. CVE-2026-111129assimp: assimp: Denial of Service via invalid animation track targets
  2. CVE-2026-111128assimp: assimp: Denial of Service via NULL pointer dereference in Ogre3D importer
  3. CVE-2026-111079goose: goose: Shell History and Environment Leak via Terminal Integration
  4. CVE-2026-110929openssh: openssh: post-authentication process retains root without file-descriptor passing
  5. CVE-2026-110928openssh: openssh: authorized_keys restrict does not apply to tunnel forwarding
  6. CVE-2026-110927openssh: openssh: a compressed payload can expand past the maximum packet size
  7. CVE-2026-110926openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels
  8. CVE-2026-110925openssh: openssh: '$' and '\' in a command-line username expand through %u
  9. CVE-2026-110924openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication
  10. CVE-2026-110923openssh: openssh: sftp can write outside the destination directory from a server-supplied path
  11. CVE-2026-110910qs: qs: Query parameter injection via unencoded empty array keys
  12. CVE-2026-110879jackson-databind: com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types in jackson-databind allows arbitrary class instantiation (incomplete fix for CV
  13. CVE-2026-110839freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion
  14. CVE-2026-110838freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch
  15. CVE-2026-110837freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding
  16. CVE-2026-110836freerdp: freerdp: Denial of Service via crafted gateway Content-Type header
  17. CVE-2026-110835freerdp: freerdp: HTTP header injection via crafted proxy routing token
  18. CVE-2026-110834freerdp: freerdp: Denial of Service via out-of-lifecycle serial requests
  19. CVE-2026-110833freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly
  20. CVE-2026-110832freerdp: freerdp: Denial of Service via memory exhaustion in dynamic virtual channels
  21. CVE-2026-110831freerdp: FreeRDP: Denial of Service via file handle leak during drive redirection
  22. CVE-2026-110830freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling
  23. CVE-2026-110829freerdp: FreeRDP: Denial of Service via malformed rdpsnd channel fragment
  24. CVE-2026-110777evolution-data-server: local file disclosure via ATTACH file:// URIs
  25. CVE-2026-110772sure: sure: Unauthorized transaction modification via bulk update missing authorization
  26. CVE-2026-110759perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields
  27. CVE-2026-110758perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping
  28. CVE-2026-110757perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields
  29. CVE-2026-110756perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences
  30. CVE-2026-110755perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings
  31. CVE-2026-110754perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsing
  32. CVE-2026-110753perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows
  33. CVE-2026-110752perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector
  34. CVE-2026-110725fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths
  35. CVE-2026-110602libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_open
  36. CVE-2026-110354haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request
  37. CVE-2026-110353haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame
  38. CVE-2026-110306fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding
  39. CVE-2026-110264ruby: integer overflow issue in regular expression compiler
  40. CVE-2026-110249thunderbird: Denial-of-service in the Exchange email component
  41. CVE-2026-110247thunderbird: thunderbird: Arbitrary code execution via integer overflow in libmime
  42. CVE-2026-110180fast-uri: fast-uri: Security policy bypass via improper host canonicalization
  43. CVE-2026-110152chromium-browser: angle: Buffer overflow in ANGLE
  44. CVE-2026-110133ghostscript: Heap buffer overflow in Ghostscript TrueType outliner due to nPointsTotal integer underflow during retry rollback
  45. CVE-2026-110095fast-uri: fast-uri: Path traversal via improper relative URI normalization
  46. CVE-2026-110036device-mapper-persistent-data: device-mapper-persistent-data: Denial of Service via crafted block indices
  47. CVE-2026-109976clevis: clevis: integer underflow in PKCS#11 data socket handler crashes daemon on unbound client connection
  48. CVE-2026-109971clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-tool
  49. CVE-2026-109970clevis: clevis: PKCS#11 token PIN written to world-readable file
  50. CVE-2026-109969clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umask
CVE 2026 document archive — Page 9 | PulseLinux