Joern 4.0.581

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-58887

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a variable name located between $ and into a fixed-size wchar t strMAX PATH stack buffer...

CVE-2026-42533: Heap-based Buffer Overflow

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

EUVD-2026-43871

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

EUVD-2026-44023

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

EUVD-2026-43810

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-50380

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Vulnerabilities in Microsoft Windows

Microsoft has fixed a very large number of vulnerabilities in Windows. A malicious actor could exploit these vulnerabilities to carry out attacks that could result in the types of damage listed in the table below. The most serious vulnerabilities have the following identifiers: CVE-2026-49172,...

CVE-2026-54122

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-49796

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-54122

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability

...

Windows GDI+ Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

Windows GDI+ Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-12511

The AI Engine WordPress plugin versions prior to 3.5.5 is vulnerable to an arbitrary file write via path traversal . The root cause is the failure to sanitize a user-supplied filename when writing a downloaded file to the server. This allows authenticated users with editor-level access to write a...

ROS-20260714-73-0060

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...