CVE-2026-49014

In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry...

CVE-2026-48102

7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parser. In CFileId::Parse CPP/7zip/Archive/Udf/UdfIn.cpp, after validating size 38 + idLen + impLen and...

CVE-2026-48104

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populated index array. In the SquashFS handler, blockToNode is allocated with capacity for every metadata block but populated...

Chromium: CVE-2026-11261 Insufficient validation of untrusted input in PDF

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-45613

A flaw was found in Rizin, a UNIX-like reverse engineering framework. A local attacker could exploit a heap-buffer-overflow vulnerability when a user processes a specially crafted Object Module Format OMF file. This flaw could lead to limited information disclosure...

CVE-2026-50264 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

CVE-2026-50264

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

EUVD-2026-34768

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2025-12659

Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process...

PT-2026-47079

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting functions. An attacker may inject crafted format strings into event subscription requests or notification generation pa...

7-Zip buffer error vulnerability

7-Zip is an open-source compression software developed by 7-Zip. Versions 9.34 to 26.00 of 7-Zip contain a buffer error vulnerability. This vulnerability stems from improper handling of WIM archive processors’ security descriptor lookups, leading to out-of-bounds read attacks, which may result in...

Decompress security vulnerabilities

Decompress is a file decompression tool personally developed by Kevin Mårtensson. Decompress has a security vulnerability; this vulnerability arises when decompressing a ZIP archive that contains two entries with the same path. Due to issues with the order of micro-task processing, arbitrary file...

PT-2026-47078

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifiers into ONVIF scope parameters to manipulate memory...

CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11195

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-65640

creationtimestamp| type| source ---|---|--- 2026-06-04 22:52:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipmla46y2x 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187928 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187926 2026-09-02 01:00:21+00:0...

binary-exploitation-labs-Application-security-ctf-writeups

binary-exploitation-labs-Application-security-ctf-writeups...

com.github.tommyettinger:tantrum-digital (>=0.9.7.19, <=0.9.8.19), com.github.tommyettinger:tantrum-jdkgdxds (>=1.13.1.19, <=1.14.0.19) +10 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.14.0)

org.apache.fory:fory-core MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital =0.9.7.19, =1.13.1.19, =0.1.19.19, =1.5.5, =1.6.0 Source cves:...

io.quarkiverse.fory:quarkus-fory (0.5.0), io.quarkiverse.fory:quarkus-fory-deployment (0.5.0) +9 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.13.2)

org.apache.fory:fory-core MAVEN version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - io.quarkiverse.fory:quarkus-fory 0.5.0 - io.quarkiverse.fory:quarkus-fory-deployment 0.5.0 -...

com.github.tommyettinger:tantrum-digital (0.9.2.15), com.github.tommyettinger:tantrum-jdkgdxds (1.12.3.15) +7 more potentially affected by CVE-2026-50076 via org.apache.fory:fory-core (0.12.2)

org.apache.fory:fory-core MAVEN version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.fory:fory-core and may be impacted: - com.github.tommyettinger:tantrum-digital 0.9.2.15 - com.github.tommyettinger:tantrum-jdkgdxds 1.12.3.15 -...