Browse CVEs

HIGH 7.8 CVE-2026-23208 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number of frames In this case, the user cons… Linux Kernel 4.14.188 / 4.19.132+ Fix from $1,9502026-02-14 HIGH 7.8 CVE-2026-23194 In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length zero Fix a bug where an emp… Linux Kernel 6.18.10+ Fix from $1,9502026-02-14 CRITICAL 9.8 CVE-2026-23112 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_i… Linux Kernel 5.10.250 / 5.15.200+ Fix from $2,3002026-02-13 HIGH 8.2 CVE-2025-1924 A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafte… Vnet\/ip Interface Package Mitigation only Fix from $1,9502026-02-13 CRITICAL 9.8 CVE-2026-26011 navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL'… Nav2 after 1.3.11 Fix from $2,3002026-02-12 MEDIUM 6.5 CVE-2026-20644 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, ma… Safari 18.7.5 / 26.3+ Fix from $1,6002026-02-11 HIGH 8.8 CVE-2026-20616 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4, m… Ipados 14.8.4 / 18.7.5+ Fix from $1,9502026-02-11 HIGH 7.5 CVE-2026-25990 Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image.… Pillow 12.1.1+ Fix from $1,9502026-02-11 MEDIUM 5.5 CVE-2020-37208 SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attacker… Spotftp No fix yet Fix from $1,6002026-02-11 HIGH 8.8 CVE-2026-2314 Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 7.5 CVE-2026-1837 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninit… Libjxl after 0.11.1 Fix from $1,9502026-02-11 MEDIUM 6.9 CVE-2025-48518 Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or d… Mitigation only Fix from $1,6002026-02-11 HIGH 8.8 CVE-2024-36324 Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code… Mitigation only Fix from $1,9502026-02-11 HIGH 8.1 CVE-2025-57709 A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulne… Qsync Central 5.0.0.4+ Fix from $1,9502026-02-11 HIGH 8.8 CVE-2025-30276 An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the … Qsync Central 5.0.0.4+ Fix from $1,9502026-02-11 HIGH 7.8 CVE-2026-21349 Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Lightroom 14.5.2 / 15.1.1+ Fix from $1,9502026-02-10 HIGH 7.0 CVE-2024-36355 Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wak… Mitigation only Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-25506 MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vul… Debian Linux 0.5.18+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21352 DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… Dng Software Development Kit 1.7.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21346 Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the … Bridge 15.1.4 / 16.0.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21342 Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… Substance 3d Stager 3.1.7+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21341 Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… Substance 3d Stager 3.1.7+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21357 InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.2 / 21.2+ Fix from $1,9502026-02-10 MEDIUM 5.5 CVE-2026-21358 InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial… Indesign 20.5.2 / 21.2+ Fix from $1,6002026-02-10 HIGH 7.8 CVE-2026-21334 Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Substance 3d Designer 15.1.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21335 Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Substance 3d Designer 15.1.2+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21327 After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… After Effects 25.6.4+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21328 After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… After Effects 25.6.4+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21318 After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… After Effects 25.6.4+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21312 Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context … Audition 25.6+ Fix from $1,9502026-02-10