Browse CVEs

CRITICAL 9.8 CVE-2026-16408 Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16402 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16395 Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0.0+ Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-16369 Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thun… Firefox 140.13.0 / 153.0+ Fix from $2,3002026-07-21 HIGH 8.1 CVE-2026-44508 Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver's … Mitigation only Fix from $1,9502026-07-20 CRITICAL 9.1 CVE-2026-41521 xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within … Xrdp 0.10.6.1+ Fix from $2,3002026-07-20 HIGH 7.0 CVE-2026-33327 libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly … No fix yet Fix from $1,9502026-07-20 MEDIUM 6.8 CVE-2026-33328 libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation … No fix yet Fix from $1,6002026-07-20 MEDIUM 6.5 CVE-2026-63091 ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows auth… Proftpd 1.3.9c+ Fix from $1,6002026-07-20 MEDIUM 6.5 CVE-2026-55254 NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelpe… Ncalc Fix unknown Fix from $1,6002026-07-17 HIGH 7.5 CVE-2026-59117 Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. Terminal No fix yet Fix from $1,9502026-07-16 MEDIUM 6.2 CVE-2026-48354 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An atta… C2pa after 0.84.0 Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-48342 Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current use… Bridge 15.1.5 / 16.0.3+ Fix from $1,9502026-07-14 CRITICAL 9.8 CVE-2026-58594 Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $2,3002026-07-14 HIGH 7.8 CVE-2026-58532 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-56647 Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-56194 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-56182 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-55057 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-55048 Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20175+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-55043 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-55033 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19725.20434+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-55026 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps 16.0.19725.20434+ Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-54124 Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. Terminal 1.24.11321.0 / 10.0.19044.7548+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-54115 Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50435 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50347 Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50306 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 8.2 CVE-2026-59197 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very … Pillow 12.3.0+ Fix from $1,9502026-07-14