CVE-2026-69500

CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker with low privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH) with a local at...

EUVD-2026-73169

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-69341

CVE-2026-69341 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker to escalate privileges. The flaw resides in a memory-management error where a freed object is referenced again, enabling privilege escalation when exploited locally. The CV...

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-82060

CVE-2026-82060 is an insufficient validation flaw in MongoDB Server affecting sharded collections. During document insertion, shard key values were not properly validated, allowing authenticated users to store operator-shaped objects as shard key values. When change stream events for such documen...

Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

HEIF Image Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

Raw Image Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

Microsoft WebP Image Extension Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

Windows Image Acquisition Information Disclosure Vulnerability

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

Security update for emacs

This update for emacs fixes the following issues: Arbitrary code execution when opening a specially crafted file bsc1275941. CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color ind...

SUSE-SU-2026:4083-1 Security update for emacs

This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color...

Important: Red Hat Security Advisory: Red Hat Directory Server 13.2 container image update

An updated Red Hat Directory Server 13.2 container image for RHEL 10 is now available in the Red Hat container registry, including bug fixes and security patches. Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly. To pull th...

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-70351: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-78741: Improper Neutralization of Input During Web Page Generation

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...