CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

EUVD-2026-10378

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

CVE-2026-28687 ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

CVE-2026-28686

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, A heap-buffer-overflow vulnerability exists in the PCL encode due to an undersized output buffer allocation. This vulnerability is fixed in 7.1.2-16 and 6.9.13-...

CVE-2026-28686

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, A heap-buffer-overflow vulnerability exists in the PCL encode due to an undersized output buffer allocation. This vulnerability is fixed in 7.1.2-16 and 6.9.13-...

CVE-2026-28494

CVE-2026-28494 concerns ImageMagick, where stack corruption can occur due to a stack buffer overflow in the morphology kernel parsing when user-controlled kernel strings exceed a fixed-size buffer. The issue arises because strings are copied into stack buffers via memcpy without bounds checking. ...

CVE-2025-59059

creationtimestamp| type| source ---|---|--- 2026-03-02 20:41:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mg44hu7ttx2j 2026-03-03 11:48:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg5p6465rx24 2026-03-03 15:37:46+00:00| seen|...

CVE-2026-26985

creationtimestamp| type| source ---|---|--- 2026-02-26 01:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpyw4brcq2d 2026-02-26 05:15:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfqgvmufgs2h 2026-02-26 07:17:19+00:00| seen|...

CVE-2026-3135

creationtimestamp| type| source ---|---|--- 2026-02-25 01:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnkhzakpl2o 2026-02-26 01:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfpymfcvlx22...

CVE-2026-26981

creationtimestamp| type| source ---|---|--- 2026-02-21 21:21:04+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q6vj-wxvf-5m8c 2026-02-24 05:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflg4oexck2e...

CVE-2025-68670

creationtimestamp| type| source ---|---|--- 2026-01-27 16:49:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7ohcsix27 2026-02-05 22:37:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5hbxnpzc2g 2026-02-08 14:43:32+00:00| seen|...

CVE-2026-24423

creationtimestamp| type| source ---|---|--- 2026-01-23 20:48:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4l65p5mq2c 2026-01-28 03:57:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdhey7u2rv2x 2026-01-28 19:14:51+00:00| seen|...

CVE-2026-0603

creationtimestamp| type| source ---|---|--- 2026-01-23 08:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3cke767t2r 2026-01-23 10:12:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hmmsutm2g 2026-04-27 02:00:04+00:00| seen|...

MiracleLinux 7 : firefox-128.5.1-1.0.1.el7.AXS7 (AXSA:2024-9409:41)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9409:41 advisory. firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled Exception in Add-on...

CVE-2026-0612

creationtimestamp| type| source ---|---|--- 2026-01-16 15:23:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mckfql53m42r 2026-01-16 23:02:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcl7exuslq2g...

MiracleLinux 4 : sos-2.2-17.0.1.AXS4 (AXSA:2012-41:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-41:01 advisory. Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging...

CVE-2026-22862

creationtimestamp| type| source ---|---|--- 2026-01-13 22:41:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdmsy4nf22q 2026-01-24 21:25:30+00:00| seen| https://gist.github.com/alon710/075f469985ff370437f0ec2cae3d97ec 2026-01-24 22:40:57+00:00| seen|...

CVE-2025-67921

creationtimestamp| type| source ---|---|--- 2026-01-08 10:58:41+00:00| seen| https://gist.github.com/Darkcrai86/88e2b2f6ee54226827545adf793c2e0e 2026-01-08 16:57:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwhbgclz72e 2026-01-08 16:59:12+00:00| seen|...

CVE-2025-69277

creationtimestamp| type| source ---|---|--- 2026-01-07 00:01:41+00:00| seen| https://bsky.app/profile/slackers.it/post/3mbs5zmiivy27 2026-01-08 21:24:22+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbww62xjbc2m 2026-01-08 21:32:12+00:00| seen|...

PT-2026-24126

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software for editing and manipulating digital images. A heap use-after-free issue exists in ImageMagick’s MSL decoder. By crafting a...