22218 matches found
CVE-2026-31807
SiYuan: CVE-2026-31807 is a real issue in SVG sanitization prior to v3.5.10. The SVG sanitizer fails to block animation elements (e.g., /) in /api/icon/getDynamicIcon (type=8), allowing injection of JavaScript and a reflected XSS. Nuclei templates detail the exact vector: unauthenticated access t...
CVE-2026-31807 SiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS
SiYuan is a personal knowledge management system. Prior to 3.5.10, SiYuan's SVG sanitizer SanitizeSVG blocks dangerous elements , , and removes on event handlers and javascript: in href attributes. However, it does NOT block SVG animation elements , which can dynamically set attributes to dangero...
CVE-2026-0108
The PowerVR GPU contains a vulnerability due to incorrectly configured register protection . This flaw could lead to local information disclosure without requiring additional execution privileges or user interaction. The vulnerability affects Google Pixel devices. Remediation is available via sec...
CVE-2026-0108
The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0108
The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-30948 Parse Server has stored cross-site scripting (XSS) via SVG file upload
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.4 and 8.6.17, a stored cross-site scripting XSS vulnerability allows any authenticated user to upload an SVG file containing JavaScript. The file is served inline with...
EUVD-2026-10666
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
EUVD-2026-10665
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally...
EUVD-2026-10631
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
EUVD-2026-10652
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...
EUVD-2026-10651
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...
EUVD-2026-10632
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
EUVD-2026-10633
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...
EUVD-2026-10588
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-10589
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
PYSEC-2026-2137
Copyparty is a portable file server. Prior to v1.20.11., the nohtml config option, intended to prevent execution of JavaScript in user-uploaded HTML files, did not apply to SVG images. A user with write-permission could upload an SVG containing embedded JavaScript, which would execute in the...
CVE-2026-25180
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...
CVE-2026-25180
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally...