Lucene search
+L

9174 matches found

OSV
OSV
added 2026/04/15 8:16 p.m.3 views

DEBIAN-CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

7.1CVSS5.5AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/15 8:16 p.m.15 views

CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

7.1CVSS0.00167EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/15 7:23 p.m.7 views

CVE-2026-26184

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/15 6:59 p.m.35 views

CVE-2026-40917

CVE-2026-40917 is reported in GIMP as a heap over-read in the ICNS image loader via icns_slurp() when processing crafted ICNS files. Affected software is GIMP; the vulnerability may cause application crashes or information disclosure. The connected documents corroborate the issue across multiple ...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/04/15 6:59 p.m.6 views

CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

5CVSS5.9AI score0.00167EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/15 6:59 p.m.49 views

CVE-2026-40917 Gimp: gimp: application crashes or information disclosure via crafted icns image files

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

5CVSS0.00167EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/15 6:59 p.m.4 views

CVE-2026-40917 Gimp: gimp: application crashes or information disclosure via crafted icns image files

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

5CVSS5.9AI score0.00167EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/15 6:58 p.m.9 views

CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

7.1CVSS5.8AI score0.00167EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/15 10:52 a.m.7 views

Security Bulletin: Vulnerability in util-linux affects IBM Netezza Appliance

Summary The util-linux package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-14104 Vulnerability Details CVEID:CVE-2025-14104 DESCRIPTION: A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte...

6.1CVSS7AI score0.00196EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.16 views

PT-2026-33128

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer over-read occurs in the icns slurp function when processing specially crafted ICNS image files. This can lead to application crashes or information disclosure. Recommendations At t...

7.1CVSS6.1AI score0.00167EPSS
SaveExploits0References24
EUVD
EUVD
added 2026/04/14 6:30 p.m.5 views

EUVD-2026-22430

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.0024EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/14 6:16 p.m.5 views

CVE-2026-26184

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS0.0024EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/14 6:16 p.m.5 views

CVE-2026-26169

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally...

6.1CVSS0.02418EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.9 views

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.14 views

PT-2026-32746

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose sensitive information locally, which may affect the system. A buffer over-read occurs when a progr...

6.1CVSS5.4AI score0.02418EPSS
SaveExploits0References8
Amazon
Amazon
added 2026/04/14 12:0 a.m.25 views

Medium: libvncserver

Issue Overview: LibVNCServer versions 0.9.15 and prior fixed in commit 009008e contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking i...

8.1CVSS5.9AI score0.05322EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2026/04/14 12:0 a.m.9 views

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge relates to reading beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

10CVSS7.4AI score0.00349EPSS
SaveExploits0References10Affected Software4
OSV
OSV
added 2026/04/14 12:0 a.m.13 views

UBUNTU-CVE-2026-33999

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

7.8CVSS6AI score0.0038EPSS
SaveExploits0References3
Amazon
Amazon
added 2026/04/14 12:0 a.m.15 views

Medium: gimp

Issue Overview: A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP's PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory...

6.1CVSS5.9AI score0.00634EPSS
SaveExploits1
Redos
Redos
added 2026/04/14 12:0 a.m.10 views

ROS-20260414-73-0058

A vulnerability in the ieee80211rxhaction function in the net/mac80211/rx.c module of the mac80211 stack implementation of the Linux operating system kernel is related to memory reads outside of the allocated buffer. Exploitation of the vulnerability may allow an intruder to affect confidentialit...

7.8CVSS7.2AI score0.00195EPSS
SaveExploits0
Rows per page
Query Builder