Browse CVEs

CRITICAL 9.9 CVE-2026-34987 Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler back… Wasmtime 36.0.7 / 42.0.2+ Fix from $2,3002026-04-09 MEDIUM 5.4 CVE-2026-35195 Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between componen… Wasmtime 24.0.7 / 36.0.7+ Fix from $1,6002026-04-09 HIGH 7.8 CVE-2026-34971 Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on a… Wasmtime 36.0.7 / 42.0.2+ Fix from $1,9502026-04-09 HIGH 7.8 CVE-2026-39853 osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsign… Osslsigncode 2.12+ Fix from $1,9502026-04-09 CRITICAL 9.8 CVE-2026-5442 A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (U… Orthanc 1.12.11+ Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5443 A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication f… Orthanc 1.12.11+ Fix from $2,3002026-04-09 HIGH 7.1 CVE-2026-5444 A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, imag… Orthanc 1.12.11+ Fix from $1,9502026-04-09 HIGH 8.8 CVE-2026-5873 Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a… Chrome 147.0.7727.55+ Fix from $1,9502026-04-08 HIGH 8.0 CVE-2026-30814 A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation… Archer Ax53 Firmware 1.7.1+ Fix from $1,9502026-04-08 CRITICAL 9.8 CVE-2025-52221 Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters. Ac6 Firmware Mitigation only Fix from $2,3002026-04-08 HIGH 8.4 CVE-2026-5726 ASDA-Soft Stack-based Buffer Overflow Vulnerability Asda Soft 7.2.6.0+ Fix from $1,9502026-04-08 HIGH 7.5 CVE-2026-5747 An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local gu… Firecracker after 1.14.3 Fix from $1,9502026-04-08 CRITICAL 9.8 CVE-2026-31789 Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impac… OpenSSL 3.0.20 / 3.3.7+ Fix from $2,3002026-04-07 HIGH 7.8 CVE-2026-32860 There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.  This vulnerability may r… Labview after 2022 Fix from $1,9502026-04-07 HIGH 7.8 CVE-2026-32861 There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW.  This vulnerability may… Labview after 2022 Fix from $1,9502026-04-07 HIGH 7.8 CVE-2026-32862 There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW.  This vulnerability may … Labview after 2022 Fix from $1,9502026-04-07 CRITICAL 9.8 CVE-2026-33815 Memory-safety vulnerability in github.com/jackc/pgx/v5. Pgx Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-33816 Memory-safety vulnerability in github.com/jackc/pgx/v5. Pgx 5.9.0+ Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-21413 A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A speciall… Libraw Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2025-62818 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 24… Exynos 990 Firmware Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-5731 Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of th… Firefox Mitigation only Fix from $2,3002026-04-07 HIGH 8.8 CVE-2026-5733 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2. Firefox 149.0.2+ Fix from $1,9502026-04-07 CRITICAL 9.8 CVE-2026-5734 Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed eviden… Firefox 140.9.1 / 149.0.2+ Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2026-5735 Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that wi… Firefox 149.0.2+ Fix from $2,3002026-04-07 HIGH 8.0 CVE-2026-20432 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has conne… Mt2735 Firmware Mitigation only Fix from $1,9502026-04-07 HIGH 8.8 CVE-2026-20433 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has conne… Mt2735 Firmware Mitigation only Fix from $1,9502026-04-07 MEDIUM 5.0 CVE-2026-34589 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From… Openexr 3.2.7 / 3.3.9+ Fix from $1,6002026-04-06 HIGH 7.1 CVE-2026-34379 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From… Openexr 3.2.7 / 3.3.9+ Fix from $1,9502026-04-06 MEDIUM 5.9 CVE-2026-34380 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From… Openexr 3.2.7 / 3.3.9+ Fix from $1,6002026-04-06 HIGH 7.8 CVE-2026-34588 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From… Openexr 3.2.7 / 3.3.9+ Fix from $1,9502026-04-06