Browse CVEs

HIGH 7.5 CVE-2026-63559 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memor… No fix yet Fix from $1,9502026-07-30 HIGH 7.5 CVE-2026-16529 A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. Th… No fix yet Fix from $1,9502026-07-30 CRITICAL 9.6 CVE-2026-17726 Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a … Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 CRITICAL 9.6 CVE-2026-17717 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 HIGH 8.8 CVE-2026-17705 Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… Chrome 151.0.7922.72+ Fix from $1,9502026-07-30 CRITICAL 9.6 CVE-2026-17682 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 CRITICAL 9.6 CVE-2026-17673 Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 MEDIUM 5.1 CVE-2026-62946 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, proc… No fix yet Fix from $1,6002026-07-30 HIGH 8.8 CVE-2026-18022 Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary … No fix yet Fix from $1,9502026-07-29 MEDIUM 5.9 CVE-2026-58152 Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apache Traffic Server: from 8.0.… Traffic Server 9.2.15 / 10.1.4+ Fix from $1,6002026-07-29 CRITICAL 9.8 CVE-2026-64774 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $2,3002026-07-27 HIGH 7.8 CVE-2026-64765 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 HIGH 7.8 CVE-2026-64766 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 CRITICAL 9.8 CVE-2026-64694 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6.… macOS 14.8.8 / 15.7.8+ Fix from $2,3002026-07-27 HIGH 8.8 CVE-2026-43818 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 HIGH 7.8 CVE-2026-43780 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma… Ipados 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 CRITICAL 9.8 CVE-2026-43769 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $2,3002026-07-27 CRITICAL 9.8 CVE-2026-43764 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6.… macOS 14.8.8 / 15.7.8+ Fix from $2,3002026-07-27 HIGH 8.6 CVE-2026-28973 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, ma… Ipados 14.8.8 / 15.7.8+ Fix from $1,9502026-07-27 MEDIUM 5.5 CVE-2026-66757 A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image … Enterprise Linux No fix yet Fix from $1,6002026-07-27 HIGH 7.8 CVE-2026-66758 A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bi… Enterprise Linux No fix yet Fix from $1,9502026-07-27 HIGH 7.5 CVE-2026-55969 Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: b… Thrift 0.24.0+ Fix from $1,9502026-07-27 MEDIUM 5.1 CVE-2026-16554 cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, … No fix yet Fix from $1,6002026-07-27 HIGH 7.0 CVE-2026-64283 In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When bin… Linux Kernel 7.1.4+ Fix from $1,9502026-07-25 CRITICAL 9.8 CVE-2026-16280 An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 … Ddk 26.1+ Fix from $2,3002026-07-24 HIGH 7.8 CVE-2026-66039 FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to c… Ffmpeg after 8.1.2 Fix from $1,9502026-07-24 MEDIUM 6.5 CVE-2026-13063 An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a cr… MongoDB 8.2.12 / 8.3.7+ Fix from $1,6002026-07-22 CRITICAL 9.3 CVE-2026-16416 Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via maliciou… Chrome 150.0.7871.182+ Fix from $2,3002026-07-21 MEDIUM 6.1 CVE-2026-47251 libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in … Libheif 1.22.0+ Fix from $1,6002026-07-21 MEDIUM 6.1 CVE-2026-47714 libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contain… Libheif 1.22.0+ Fix from $1,6002026-07-21