Browse CVEs

CRITICAL 9.8 CVE-2026-2781 Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.… Firefox 140.8.0 / 148.0+ Fix from $2,3002026-02-24 CRITICAL 9.8 CVE-2026-2774 Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, a… Firefox 115.33.0 / 140.8.0+ Fix from $2,3002026-02-24 CRITICAL 9.8 CVE-2026-2762 Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and … Firefox 140.8.0 / 148.0+ Fix from $2,3002026-02-24 HIGH 7.5 CVE-2026-25989 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SV… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-02-24 HIGH 7.5 CVE-2026-25970 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed int… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-02-24 CRITICAL 9.8 CVE-2026-25897 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, an Integer O… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $2,3002026-02-24 HIGH 8.2 CVE-2026-25794 ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithme… Imagemagick 7.1.2-15+ Fix from $1,9502026-02-24 CRITICAL 9.1 CVE-2026-2588 Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned lo… Crypt\ after 2.001 Fix from $2,3002026-02-23 MEDIUM 6.0 CVE-2026-0619 A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A… Mitigation only Fix from $1,6002026-02-12 MEDIUM 5.5 CVE-2024-36316 The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of serv… Mitigation only Fix from $1,6002026-02-11 HIGH 7.0 CVE-2024-36320 Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, inte… Mitigation only Fix from $1,9502026-02-11 MEDIUM 5.4 CVE-2025-48515 Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the … Mitigation only Fix from $1,6002026-02-10 MEDIUM 5.5 CVE-2026-21354 DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-serv… Dng Software Development Kit 1.7.2+ Fix from $1,6002026-02-10 HIGH 7.8 CVE-2026-21353 DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution… Dng Software Development Kit 1.7.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21347 Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execut… Bridge 15.1.4 / 16.0.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21321 After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution… After Effects 25.6.4+ Fix from $1,9502026-02-10 MEDIUM 5.9 CVE-2025-64098 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,6002026-02-03 HIGH 7.5 CVE-2025-62600 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 HIGH 7.5 CVE-2025-62599 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14… Debian Linux 2.6.11 / 3.3.1+ Fix from $1,9502026-02-03 HIGH 7.8 CVE-2025-47363 Memory corruption when calculating oversized partition sizes without proper checks. Qam8255p Firmware Mitigation only Fix from $1,9502026-02-02 HIGH 7.8 CVE-2025-47364 Memory corruption while calculating offset from partition start point. Qam8255p Firmware No fix yet Fix from $1,9502026-02-02 HIGH 7.8 CVE-2026-25210 In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for t… Libexpat 2.7.4+ Fix from $1,9502026-01-30 MEDIUM 5.3 CVE-2026-24889 soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and `Prng::gen_range` (for… Rs Soroban Sdk 22.0.9 / 23.5.1+ Fix from $1,6002026-01-28 HIGH 7.8 CVE-2025-33218 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer over… Mitigation only Fix from $1,9502026-01-28 HIGH 7.8 CVE-2025-33219 NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound.… Mitigation only Fix from $1,9502026-01-28 HIGH 7.8 CVE-2026-24875 Integer Overflow or Wraparound vulnerability in yoyofr modizer.This issue affects modizer: before 4.1.1. Patch available Fix from $1,9502026-01-27 HIGH 8.8 CVE-2025-41726 A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally vi… Mitigation only Fix from $1,9502026-01-27 CRITICAL 9.8 CVE-2026-24830 Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2. Patch available Fix from $2,3002026-01-27 HIGH 8.3 CVE-2026-24808 Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This i… Patch available Fix from $1,9502026-01-27 CRITICAL 10.0 CVE-2026-24814 Integer Overflow or Wraparound vulnerability in swoole swoole-src (thirdparty/hiredis modules). This vulnerability is associated with program files s… Patch available Fix from $2,3002026-01-27