CVE-2026-107738 SumatraPDF: Untrusted binary record offset used without lower-bound validation

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...

CVE-2026-107738 SumatraPDF: Untrusted binary record offset used without lower-bound validation

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...

GO-2026-6612 Double flow control refund on HTTP/2 server streams in net/http

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-107733

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

CVE-2026-107733 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

CVE-2026-105825

A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause a denial of service DoS by submitting an image containing a specially crafted Extensible Metadata Platform XMP profile. Due to improper error handling during profile processing, the application terminates the...

CVE-2026-105398

A flaw was found in ImageMagick. An attacker can exploit a heap buffer overflow vulnerability by supplying crafted input during calls to the GetVirtualPixels application programming interface API. This issue allows the attacker to overwrite heap memory, leading to an application crash and resulti...

CVE-2026-98184

A flaw was found in the Linux kernel's mwifiex driver. An integer truncation vulnerability occurs during authentication frame length calculation, causing the driver to allocate an undersized memory buffer. A local attacker with network administration privileges can exploit this issue by submittin...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-104628

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

CVE-2026-107727

The Strawberry GraphQL library (versions 0.312.3 through 0.327.2 ) contains a vulnerability in the legacy graphql-ws subscription handler located in strawberry/subscriptions/protocols/graphql_ws/handlers.py. The root cause is that the handler fails to remove naturally completed operations from se...

CVE-2026-107727

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-107727 Strawberry legacy graphql-ws retains naturally completed subscription slots

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-107727 Strawberry legacy graphql-ws retains naturally completed subscription slots

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-84230

IBM Guardium Data Protection version 12.2.2 is vulnerable to a denial of service (DoS) attack. The root cause is a race condition (CWE-362) triggered by concurrent unsynchronized writes to a shared map. A remote attacker can exploit this to cause the service to become unavailable. IBM has release...

CVE-2026-84230 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-84247 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-104628

Satel Netco Design versions prior to v2.1.7 are vulnerable to an inefficient regular expression complexity vulnerability (CWE-1333). An authenticated user with Viewer privileges can submit specially crafted search input that triggers excessive processing. This flaw can lead to a degradation of th...

CVE-2026-104628 Satel Netco Design Inefficient Regular Expression Complexity

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...