PT-2026-87508

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...

ROS-20260908-73-0030

The vulnerability in golang-x-image is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EulerOS 2.0 SP12 : docker-runc (EulerOS-SA-2026-3256)

According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...

PT-2026-87641

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-78741

Silverpeas Core versions

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

CVE-2026-18090: Out-of-bounds Read

A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image .icns file. The uncompress function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during...

PT-2026-87522

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description A use-after-free condition occurs in Windows Image Acquisition, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

PT-2026-88461

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

PT-2026-88232

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A mimetype check bypass exists in the LocalImageResolver.java component within the SystemUI process. While a mimetype allowlist was implemented to prevent the use of bug-prone RAW decoders in...

PT-2026-88231

In WriteImageToDisk of runtime image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69649: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-69341: Use After Free

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

ROS-20260908-73-0089

The vulnerability in golang-x-image is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260908-73-0032

The vulnerability in golang-x-image is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EulerOS 2.0 SP12 : docker-runc (EulerOS-SA-2026-3331)

According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...

EulerOS 2.0 SP12 : libXpm (EulerOS-SA-2026-3273)

According to the versions of the libXpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by...

RHEL 10 : image-builder (RHSA-2026:65534)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65534 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes:...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the MSL decoder. An attacker can exhaust system memory by submitting a specially crafted MSL image that triggers memory allocation without proper deallocation, leading to...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...