EUVD-2026-4611

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader when user-controllable input is incorporated into profile data...

CVE-2026-24403

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader when user-controllable input is incorporated into profile data...

CVE-2026-24403 iccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer Overflow

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader when user-controllable input is incorporated into profile data...

CVE-2026-24403

ICCDev (iccDEV) versions

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...

CVE-2025-69907

creationtimestamp| type| source ---|---|--- 2026-01-24 00:16:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wraufk527...

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

PT-2026-4545

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow exists in the CheckHeader...

PT-2026-4542

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 21st, 2026 Description Use of a broken or risky cryptographic algorithm in the CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As...

SUSE SLES15 / openSUSE 15 Security Update : exiv2-0_26 (SUSE-SU-2026:0231-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0231-1 advisory. Add reference for previously fixed issue: - CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing...

CVE-2025-70458

creationtimestamp| type| source ---|---|--- 2026-01-23 23:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4usqmo7f2n...

CVE-2026-24609

creationtimestamp| type| source ---|---|--- 2026-01-23 23:18:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjzymcq2x...

CVE-2026-24608

creationtimestamp| type| source ---|---|--- 2026-01-23 23:18:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjt5xok2g...

CVE-2026-24635

creationtimestamp| type| source ---|---|--- 2026-01-23 23:18:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjlyuo227...

CVE-2026-1386

creationtimestamp| type| source ---|---|--- 2026-01-23 21:14:50+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3md4mmlbdl7y2 2026-01-23 23:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4uatnwsf2m 2026-01-24 10:05:35+00:0...

CVE-2025-7407

creationtimestamp| type| source ---|---|--- 2026-01-23 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxq32zo2i 2026-06-23 14:03:58+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d32f7131-ab2b-437f-885a-5dcb6e3f4147...

CVE-2022-31208

creationtimestamp| type| source ---|---|--- 2026-01-23 21:02:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxp566f2v 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15cf3828-36dd-46cf-9e24-76dd2a807cf4...

CVE-2026-24423

creationtimestamp| type| source ---|---|--- 2026-01-23 20:48:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4l65p5mq2c 2026-01-28 03:57:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdhey7u2rv2x 2026-01-28 19:14:51+00:00| seen|...