Browse CVEs

MEDIUM 5.3 CVE-2026-62291 libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 au… Fix unknown Fix from $4,0002026-08-18 MEDIUM 6.4 CVE-2026-12520 The Sierra Wireless HL7800 cellular modem driver (drivers/modem/vendor_standalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier) … Fix unknown Fix from $4,0002026-08-18 CRITICAL 9.3 CVE-2026-50161 libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in … Fix unknown Fix from $5,7502026-08-18 CRITICAL 9.8 CVE-2026-67271 Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentiall… Fix unknown Fix from $5,7502026-08-18 HIGH 7.8 CVE-2026-54758 Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDi… Fix unknown Fix from $4,9002026-08-17 HIGH 8.9 CVE-2026-12553 HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files… Fix unknown Fix from $4,9002026-08-17 MEDIUM 5.0 CVE-2026-12519 The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/modem/vendor_standalone/wncm14a2a.c). Th… Fix unknown Fix from $4,0002026-08-17 CRITICAL 9.8 CVE-2026-73193 DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by pr… Fix unknown Fix from $5,7502026-08-15 CRITICAL 9.1 CVE-2026-73194 DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. … Fix unknown Fix from $5,7502026-08-15 HIGH 7.3 CVE-2026-13196 Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in ver… No fix yet Fix from $4,9002026-08-14 HIGH 7.8 CVE-2026-18511 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, … I No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-18077 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow. No fix yet Fix from $4,9002026-08-13 HIGH 8.6 CVE-2026-17502 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. No fix yet Fix from $4,9002026-08-13 HIGH 8.2 CVE-2026-17272 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. No fix yet Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-17223 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow. I No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-18846 IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the ho… I No fix yet Fix from $4,9002026-08-13 CRITICAL 9.8 CVE-2026-17206 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow. I No fix yet Fix from $5,7502026-08-13 HIGH 8.8 CVE-2026-16975 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow. I No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-16982 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow. I No fix yet Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-17029 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write. I No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-16887 IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. I No fix yet Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-16929 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow. I No fix yet Fix from $4,0002026-08-13 CRITICAL 9.1 CVE-2026-16815 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-b… I No fix yet Fix from $5,7502026-08-13 MEDIUM 6.5 CVE-2026-16692 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow. I No fix yet Fix from $4,0002026-08-13 HIGH 8.8 CVE-2026-73514 The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a da… No fix yet Fix from $4,9002026-08-13 HIGH 8.2 CVE-2026-70461 rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-control… No fix yet Fix from $4,9002026-08-13 HIGH 8.2 CVE-2026-70456 rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent… No fix yet Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-70457 rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a… No fix yet Fix from $4,0002026-08-13 HIGH 8.2 CVE-2026-70458 rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on… No fix yet Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-53792 rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger m… No fix yet Fix from $4,0002026-08-13