Browse CVEs

CRITICAL 10.0 CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ES… Firefox 115.34.0 / 140.9.0+ Fix from $2,3002026-03-24 HIGH 8.6 CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ES… Firefox 115.34.0 / 140.9.0+ Fix from $1,9502026-03-24 HIGH 7.5 CVE-2026-33855 Integer Overflow or Wraparound vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. Android Imagemagick7 7.1.2-11+ Fix from $1,9502026-03-24 CRITICAL 9.4 CVE-2026-4739 Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (‎Modules/ThirdParty/Expat/src/expat modules).This issue affects ITK: b… Patch available Fix from $2,3002026-03-24 HIGH 8.5 CVE-2026-4731 Integer Overflow or Wraparound vulnerability in artraweditor ART (‎rtengine‎ modules). This vulnerability is associated with program files dcraw.C. … Patch available Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4679 Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted H… Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 HIGH 7.5 CVE-2026-33306 bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt im… Bcrypt Ruby 3.1.22+ Fix from $1,9502026-03-24 HIGH 7.8 CVE-2026-33298 llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an a… Llama.cpp No fix yet Fix from $1,9502026-03-24 HIGH 8.4 CVE-2026-32845 cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows … Patch available Fix from $1,9502026-03-23 HIGH 7.5 CVE-2025-46597 Bitcoin Core 0.13.0 through 29.x has an integer overflow. Bitcoin Core 0.30.0+ Fix from $1,9502026-03-20 HIGH 7.5 CVE-2026-33040 libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, the Gossipsub implementation ac… Libp2p Gossipsub 0.49.3+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4464 Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 8.8 CVE-2026-4452 Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 146.0.7680.153+ Fix from $1,9502026-03-20 HIGH 7.5 CVE-2026-32875 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer o… Ultrajson 5.12.0+ Fix from $1,9502026-03-20 HIGH 8.1 CVE-2026-32759 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions … Filebrowser after 2.61.2 Fix from $1,9502026-03-20 HIGH 8.1 CVE-2026-31970 HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF] files. In the GZI … Htslib 1.21 / 1.22.2+ Fix from $1,9502026-03-18 MEDIUM 6.7 CVE-2026-2809 Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap… Mitigation only Fix from $1,6002026-03-17 MEDIUM 6.8 CVE-2025-15584 Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap… Mitigation only Fix from $1,6002026-03-17 HIGH 7.8 CVE-2026-2921 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on … Gstreamer 1.28.1+ Fix from $1,9502026-03-16 HIGH 7.5 CVE-2026-31814 Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can c… Yamux 0.13.9+ Fix from $1,9502026-03-13 MEDIUM 6.5 CVE-2026-32239 Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, … Capnproto 1.4.0+ Fix from $1,6002026-03-12 HIGH 7.8 CVE-2026-27940 llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer over… Llama.cpp No fix yet Fix from $1,9502026-03-12 HIGH 8.8 CVE-2026-3914 Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 146.0.7680.71+ Fix from $1,9502026-03-11 MEDIUM 5.5 CVE-2026-27281 DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-serv… Dng Software Development Kit after 1.7.1 Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-26134 Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally. 365 Copilot 16.0.19822.20000+ Fix from $1,9502026-03-10 HIGH 8.0 CVE-2026-26111 Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows Server 2012 6.2.9200.25973 / 10.0.14393.8957+ Fix from $1,9502026-03-10 HIGH 8.0 CVE-2026-25172 Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows Server 2012 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 8.0 CVE-2026-25173 Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 6.1 CVE-2026-30937 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit uns… Imagemagick 6.9.13-41 / 7.1.2-16+ Fix from $1,6002026-03-10 HIGH 8.1 CVE-2026-28693 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer o… Imagemagick 6.9.13-41 / 7.1.2-16+ Fix from $1,9502026-03-10