Browse CVEs

MEDIUM 5.5 CVE-2026-29043 HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buf… Hdf5 after 1.14.1-2 Fix from $1,6002026-04-10 CRITICAL 9.8 CVE-2026-5264 Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overfl… Wolfssl 5.9.1+ Fix from $2,3002026-04-09 HIGH 7.5 CVE-2026-5447 Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate in… Wolfssl 5.9.1+ Fix from $1,9502026-04-09 CRITICAL 9.8 CVE-2026-5187 Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c. First, a bounds check only validates one availab… Wolfssl after 5.9.0 Fix from $2,3002026-04-09 HIGH 8.8 CVE-2026-5868 Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via… Chrome 147.0.7727.55+ Fix from $1,9502026-04-08 HIGH 8.8 CVE-2026-5858 Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (C… Chrome 147.0.7727.55+ Fix from $1,9502026-04-08 MEDIUM 6.1 CVE-2026-35199 SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes … Symcrypt 103.11.0+ Fix from $1,6002026-04-06 HIGH 7.8 CVE-2026-21372 Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations. X2000094 Firmware Mitigation only Fix from $1,9502026-04-06 MEDIUM 5.3 CVE-2026-34979 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-ba… Cups after 2.4.16 Fix from $1,6002026-04-03 HIGH 8.8 CVE-2026-5474 A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw/src/to_lab_passthru_encode.c… Core Flight System after 7.0.0 Fix from $1,9502026-04-03 MEDIUM 5.3 CVE-2026-34743 XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to deco… Xz 5.8.3+ Fix from $1,6002026-04-02 MEDIUM 6.5 CVE-2026-34118 A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C520WS v2.6 in the HTTP POST body parsing logic due to missin… Tapo C520ws Firmware 1.2.4+ Fix from $1,6002026-04-02 MEDIUM 6.5 CVE-2026-34119 A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request b… Tapo C520ws Firmware 1.2.4+ Fix from $1,6002026-04-02 MEDIUM 6.5 CVE-2026-34120 A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content d… Tapo C520ws Firmware 1.2.4+ Fix from $1,6002026-04-02 CRITICAL 9.8 CVE-2026-5244 A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS… Mongoose 7.21+ Fix from $2,3002026-04-02 HIGH 7.3 CVE-2026-34545 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From… Openexr 3.4.7+ Fix from $1,9502026-04-01 HIGH 8.8 CVE-2026-5272 Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Ch… Chrome 146.0.7680.177+ Fix from $1,9502026-04-01 HIGH 8.8 CVE-2026-5275 Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML … Chrome 146.0.7680.177+ Fix from $1,9502026-04-01 MEDIUM 5.3 CVE-2026-5235 A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of… Mitigation only Fix from $1,6002026-03-31 MEDIUM 5.3 CVE-2026-5236 A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of t… Mitigation only Fix from $1,6002026-03-31 MEDIUM 5.5 CVE-2026-34539 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF… Iccdev 2.3.1.6+ Fix from $1,6002026-03-31 MEDIUM 5.5 CVE-2026-34540 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trig… Iccdev 2.3.1.6+ Fix from $1,6002026-03-31 MEDIUM 5.5 CVE-2026-34534 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trig… Iccdev 2.3.1.6+ Fix from $1,6002026-03-31 MEDIUM 5.5 CVE-2026-34535 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trig… Iccdev 2.3.1.6+ Fix from $1,6002026-03-31 HIGH 7.5 CVE-2026-5201 A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation … Enterprise Linux Mitigation only Fix from $1,9502026-03-31 MEDIUM 5.3 CVE-2026-5185 A security flaw has been discovered in Nothings stb_image up to 2.30. This affects the function stbi__gif_load_next of the file stb_image.h of the co… Mitigation only Fix from $1,6002026-03-31 MEDIUM 6.6 CVE-2026-33987 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/per… Freerdp 3.24.2+ Fix from $1,6002026-03-30 HIGH 7.5 CVE-2026-33984 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEnt… Freerdp 3.24.2+ Fix from $1,9502026-03-30 HIGH 7.5 CVE-2026-33986 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->wi… Freerdp 3.24.2+ Fix from $1,9502026-03-30 MEDIUM 5.9 CVE-2026-26073 EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::queue`/`std::deque` corruption. The … Everest 2026.02.0+ Fix from $1,6002026-03-26