58864 matches found
CVE-2026-69649
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-69613
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-69500
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-69483
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...
CVE-2026-69341
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
Important: Red Hat Security Advisory: image-builder security update
An update for image-builder is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2026-28666
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28666
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.324 Vulnerability Details CVEID:CVE-2025-11468 DESCRIPTION: When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis...
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
CVE-2026-69613
CVE-2026-69613 is a use after free vulnerability in Windows Image Acquisition (WIA) that allows an authorized attacker to perform local privilege escalation . The flaw requires low existing privileges and high attack complexity, with no user interaction needed (CVSS 3.1: 7.0 HIGH , vector AV:L/AC...
EUVD-2026-73560
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
EUVD-2026-73520
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...
CVE-2026-69483
CVE-2026-69483 is an out-of-bounds read vulnerability in Windows Image Acquisition (WIA) that allows an authorized, local attacker to achieve information disclosure with high confidentiality impact . The CVSS 3.1 score is 4.7 (Medium) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N, indica...
SUSE CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...
CVE-2026-69649
CVE-2026-69649 is a heap-based buffer overflow in the Windows Raw Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior privileges, with a CVSS 3.1 score of 8.8 (HIGH) reflecting high impact o...
EUVD-2026-73147
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-70351
CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...