Browse CVEs

HIGH 8.8 CVE-2026-62822 Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-62816 Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-62751 Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. Windows 10 21h2 10.0.19044.7663 / 10.0.19045.7663+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-62735 Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 MEDIUM 6.8 CVE-2026-62699 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical… Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-61937 Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-59127 Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. Windows 10 1607 No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-58641 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. .net 8.0.30 / 9.0.19+ Fix from $4,9002026-08-11 MEDIUM 6.2 CVE-2026-48444 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An atta… C2pa 0.12.1 / 0.27.6+ Fix from $4,0002026-08-11 MEDIUM 6.2 CVE-2026-48445 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An atta… C2pa 0.12.1 / 0.27.6+ Fix from $4,0002026-08-11 MEDIUM 6.2 CVE-2026-48387 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An atta… C2pa 0.12.1 / 0.27.6+ Fix from $4,0002026-08-11 HIGH 7.1 CVE-2026-73074 Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to … No fix yet Fix from $4,9002026-08-11 HIGH 7.5 CVE-2026-15562 A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-r… No fix yet Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-59088 A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to… No fix yet Fix from $4,0002026-08-10 MEDIUM 5.3 CVE-2026-71392 GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueTy… No fix yet Fix from $4,0002026-08-10 MEDIUM 5.3 CVE-2026-71393 GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function computes an allocation size using a … No fix yet Fix from $4,0002026-08-10 HIGH 7.1 CVE-2026-19389 Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objec… No fix yet Fix from $4,9002026-08-10 MEDIUM 5.7 CVE-2026-15534 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_reg… No fix yet Fix from $4,0002026-08-09 HIGH 7.5 CVE-2026-20339 A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other… No fix yet Fix from $1,9502026-08-07 HIGH 7.8 CVE-2026-70638 llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multi… No fix yet Fix from $1,9502026-08-06 HIGH 7.8 CVE-2026-70628 FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsu… No fix yet Fix from $1,9502026-08-06 HIGH 7.8 CVE-2026-43627 llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in … No fix yet Fix from $1,9502026-08-06 HIGH 8.1 CVE-2026-43629 llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the state_read_data() func… No fix yet Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19174 Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 MEDIUM 6.8 CVE-2026-19028 H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size… No fix yet Fix from $1,6002026-08-06 MEDIUM 5.5 CVE-2026-44605 A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially… No fix yet Fix from $1,6002026-08-05 HIGH 7.8 CVE-2026-71261 dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chu… No fix yet Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-45103 OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses… No fix yet Fix from $1,9502026-08-04 HIGH 7.8 CVE-2026-21366 Memory corruption while processing a packet with a size close to the maximum allowed value. Lemans Au Lgit Firmware No fix yet Fix from $1,9502026-08-04 HIGH 8.8 CVE-2026-65423 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds writ… Mitigation only Fix from $1,9502026-07-30