Browse CVEs

MEDIUM 6.0 CVE-2026-10587 A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. No fix yet Fix from $1,6002026-07-16 HIGH 7.8 CVE-2026-3842 A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This o… No fix yet Fix from $1,9502026-07-16 HIGH 7.1 CVE-2026-50144 ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 a… Mitigation only Fix from $1,9502026-07-15 HIGH 8.3 CVE-2026-62349 TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c t… Mitigation only Fix from $1,9502026-07-15 HIGH 8.8 CVE-2026-10673 The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (… Zephyr Mitigation only Fix from $1,9502026-07-15 HIGH 7.8 CVE-2026-48337 Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exp… Illustrator 29.8.9 / 30.6+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48335 Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exp… Illustrator 29.8.9 / 30.6+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48336 Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exp… Illustrator 29.8.9 / 30.6+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48370 Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… Media Encoder after 26.2.2 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48341 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… Bridge 15.1.5 / 16.0.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48343 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… Bridge 15.1.5 / 16.0.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48366 Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… Media Encoder after 26.2.2 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48367 After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… After Effects after 26.2.1 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48369 Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… Premiere Pro after 26.2.2 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48311 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… Bridge 15.1.5 / 16.0.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47976 Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… Media Encoder after 26.2.2 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48270 Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… Premiere Pro after 26.2.2 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48274 After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… After Effects after 26.2.1 Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-55130 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19725.20434+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-55056 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48309 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48365 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-48368 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47967 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47968 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… Audition 25.6.6 / 26.3+ Fix from $1,9502026-07-14 HIGH 8.2 CVE-2026-59197 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very … Pillow 12.3.0+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-59205 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corr… Pillow 12.3.0+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-59199 Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coo… Pillow 12.3.0+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-10669 On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verif… Zephyr 4.5.0+ Fix from $1,9502026-07-14 HIGH 7.3 CVE-2026-8314 A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems… Arena 17.00.01+ Fix from $1,9502026-07-14