CVE-2026-34536

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack overflow SO in SIccCalcOp::ArgsUsed. The issue is observable under AddressSanitizer as a stack-overflow when iccApplyProfiles processes ...

CVE-2026-34541

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB via a null-pointer member call in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions reported by UBSan as...

CVE-2026-34535

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...

CVE-2026-34547

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior UB condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has been patched in version 2.3.1.6...

CVE-2026-34539

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can trigger a heap-buffer-overflow HBO in CTiffImg::WriteLine. The issue is observable under AddressSanitizer as an out-of-bounds heap read...

CVE-2026-34542

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

CVE-2026-3987

creationtimestamp| type| source ---|---|--- 2026-04-01 22:45:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihrfdqeim25 2026-04-01 23:28:03+00:00| seen| Telegram/9GieXm2mvI1hTc72mHyuKx2RXs9Lk1GMse1mK9qILNsF30 2026-04-01 23:28:25+00:00| seen|...

CVE-2025-58669

creationtimestamp| type| source ---|---|--- 2026-04-01 22:28:06+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mihqgjumqp2c...

CVE-2026-25835

creationtimestamp| type| source ---|---|--- 2026-04-01 21:40:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mihnqjndcd2l 2026-04-02 05:26:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miihs2siqs2s...

CVE-2026-25833

creationtimestamp| type| source ---|---|--- 2026-04-01 21:39:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mihnoq6bmr2g 2026-04-02 05:25:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miihrkskbw25 2026-04-02 05:36:06+00:00| seen|...

CVE-2026-34072

creationtimestamp| type| source ---|---|--- 2026-04-01 20:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihlad64el2d 2026-04-02 06:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijrtufle2s 2026-04-03 17:26:02+00:00| published-proof-of-concept|...

CVE-2026-34455

creationtimestamp| type| source ---|---|--- 2026-04-01 20:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkynlnrb2n 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ...

CVE-2026-34872

creationtimestamp| type| source ---|---|--- 2026-04-01 20:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihklx2ml52o 2026-04-02 04:02:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miid44zikf2x 2026-04-03 21:40:09+00:00| seen|...

CVE-2026-20174

creationtimestamp| type| source ---|---|--- 2026-04-01 18:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihbxcp63j2i...

CVE-2026-35471

creationtimestamp| type| source ---|---|--- 2026-04-01 17:29:12+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-6qcc-6q27-whp8 2026-04-06 22:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miue2nxbnm2o 2026-04-06 23:22:19+00:00...

CVE-2026-3139

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-20151

creationtimestamp| type| source ---|---|--- 2026-04-01 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/ 2026-04-01 18:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihccxxlev2g 2026-04-02 10:08:50+00:00| seen|...

CVE-2026-33544

creationtimestamp| type| source ---|---|--- 2026-04-01 15:49:44+00:00| published-proof-of-concept| https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-9q5m-jfc4-wc92 2026-04-02 17:37:18+00:00| seen| Telegram/asfs2UkHDA2dEAWxK7wNvn0OefGesF-RFz1ocNui3XpVnY 2026-04-03 10:00:36+00:00|...

CVE-2026-25371

creationtimestamp| type| source ---|---|--- 2026-04-01 15:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3migzvv5tuw2w 2026-04-06 21:20:35+00:00| published-proof-of-concept| Telegram/MEpsfFR7A3mQ2dGKH0pRdtzvADr6R8o0dal6eRmpMO8wsk...

CVE-2026-34430

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 16:29:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4frky4p2r 2026-04-01 16:50:34+00:00| seen|...