Browse CVEs

HIGH 8.6 CVE-2026-54410 nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthe… Mitigation only Fix from $1,9502026-06-14 HIGH 7.8 CVE-2026-6676 Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code… Mitigation only Fix from $1,9502026-06-12 HIGH 7.8 CVE-2025-14098 Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may … Mitigation only Fix from $1,9502026-06-12 HIGH 8.8 CVE-2026-34195 Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. … Mitigation only Fix from $1,9502026-06-12 CRITICAL 9.8 CVE-2026-41157 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space d… Mitigation only Fix from $2,3002026-06-12 HIGH 7.8 CVE-2025-7004 Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denia… Mitigation only Fix from $1,9502026-06-12 HIGH 7.8 CVE-2026-47965 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary co… Acrobat 24.001.30365 / 26.001.21651+ Fix from $1,9502026-06-12 MEDIUM 5.8 CVE-2026-46690 unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB rea… Unbounded Spsc after 0.2.0 Fix from $1,6002026-06-12 HIGH 8.8 CVE-2026-11933 A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authe… MongoDB 4.4.31 / 5.0.34+ Fix from $1,9502026-06-12 HIGH 8.3 CVE-2026-12019 Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the rende… Chrome 149.0.7827.115+ Fix from $1,9502026-06-11 MEDIUM 6.5 CVE-2026-53702 A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, th… Mitigation only Fix from $1,6002026-06-11 MEDIUM 6.5 CVE-2026-53701 An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile p… Mitigation only Fix from $1,6002026-06-11 HIGH 7.5 CVE-2026-53461 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect… Imagemagick 6.9.13-50 / 7.1.2-25+ Fix from $1,9502026-06-10 MEDIUM 6.2 CVE-2026-53465 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can r… Imagemagick 7.1.2-25+ Fix from $1,6002026-06-10 MEDIUM 5.5 CVE-2026-48724 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with ma… Imagemagick 7.1.2-24+ Fix from $1,6002026-06-10 MEDIUM 5.5 CVE-2026-46521 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using L… Imagemagick 6.9.13-48 / 7.1.2-23+ Fix from $1,6002026-06-10 HIGH 7.5 CVE-2026-46520 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading… Imagemagick 6.9.13-48 / 7.1.2-23+ Fix from $1,9502026-06-10 MEDIUM 6.5 CVE-2026-11604 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated pee… Openvpn after 2.8.3 Fix from $1,6002026-06-10 MEDIUM 6.7 CVE-2025-10238 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allo… Mitigation only Fix from $1,6002026-06-10 HIGH 8.8 CVE-2026-45328 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrap… Esp Idf Patch available Fix from $1,9502026-06-10 HIGH 8.7 CVE-2026-44634 SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer ove… Patch available Fix from $1,9502026-06-10 HIGH 8.1 CVE-2026-9753 The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory … MongoDB 7.0.35 / 8.0.24+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-47911 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary co… Acrobat 24.001.30383 / 26.001.21662+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-48306 Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… Substance 3d Sampler 6.0.1+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-48305 Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… Substance 3d Sampler 6.0.1+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-34709 Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… Substance 3d Sampler 6.0.1+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-34710 Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… Substance 3d Sampler 6.0.1+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-48293 InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Indesign 20.5.4 / 21.4+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-34706 InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… Incopy 20.5.4 / 21.4+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-34700 InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Indesign 20.5.4 / 21.4+ Fix from $1,9502026-06-09