14290 matches found
CVE-2026-112353
GFI KerioConnect (Kerio Connect) versions prior to 10.0.8 Patch 2 are vulnerable to a stored cross-site scripting (XSS) vulnerability within the Webmail component . The root cause is the failure to properly sanitize event-handler attributes in SVG email attachments. Attackers can exploit the temp...
GHSA-WX4J-MVGX-MQWP Satori-generated SVG has improper escaping
Impact Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Workaround No complete workaround exists besides upgrading. Applications tha...
Satori-generated SVG has improper escaping
Impact Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Workaround No complete workaround exists besides upgrading. Applications tha...
npm: Satori-generated SVG has improper escaping
npm: Satori-generated SVG has improper escaping vulnerability discovered by ? in WordPress npm satori versions = 0.0.27, 0.33.5...
EUVD-2026-89994
Satori-generated SVG has improper escaping...
GHSA-WQW6-WPR3-45RH fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
Summary fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image processing. This was reproduced with an...
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
Summary fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image processing. This was reproduced with an...
CVE-2026-118025
Other issue in the SVG component. This vulnerability was fixed in Firefox 159...
CVE-2026-118017
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159...
CVE-2026-117948
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6...
CVE-2026-117926
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6...
CVE-2026-117927
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6...
CVE-2026-117914
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6...
CVE-2026-117913
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6...
CVE-2026-118025
The Firefox browser is affected by a vulnerability identified as CVE-2026-118025 within its SVG component . The specific root cause and technical details are not provided in the documentation beyond being described as an "Other issue." This vulnerability was addressed and fixed in Firefox 159 . N...
EUVD-2026-110923
Other issue in the SVG component. This vulnerability was fixed in Firefox 159...
CVE-2026-118017
A use-after-free vulnerability exists in the SVG component of the Firefox web browser. This security flaw was addressed and resolved in Firefox 159 . No specific exploitation details or links are provided in the documentation.
EUVD-2026-110915
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159...
CVE-2026-117948
A use-after-free vulnerability exists in the SVG component of the Firefox web browser. This issue was addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.