CVE-2026-24662

creationtimestamp| type| source ---|---|--- 2026-05-14 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN69128376 2026-05-15 07:25:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlusjavsrk2i...

CVE-2026-41281

creationtimestamp| type| source ---|---|--- 2026-05-12 20:00:15+00:00| seen| https://jvn.jp/en/jp/JVN24167657 2026-05-14 02:41:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrs5lypms2v...

CVE-2026-24449

creationtimestamp| type| source ---|---|--- 2026-05-11 22:15:50+00:00| seen| https://jvn.jp/en/jp/JVN94012927...

CVE-2026-42950

creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-05-13 15:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqn3qbbyj2k 2026-06-03 01:22:01+00:00| seen|...

Astra Linux – Vulnerability in GhostScript

A issue was discovered in Artifex Ghostscript prior to version 10.05.0. The NPDL device has a Compression buffer overflow in the contrib/japanese/gdevnpdl.c file...

CVE-2026-33566

creationtimestamp| type| source ---|---|--- 2026-04-22 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN57877356...

CVE-2026-40529

creationtimestamp| type| source ---|---|--- 2026-04-22 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN08026319...

CVE-2026-32955

creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-20 05:17:09+00:00| seen| Telegram/oT3io0aR7EQyKUnAhTuUuKTmw-PFwRgwwLAn7oSA51QT1kY 2026-04-20 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjvs3zrp3e2c...

CVE-2026-32959

creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-20 06:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvsvb6xzq2e 2026-04-21 10:00:00+00:00| seen|...

Friday Squid Blogging: New Giant Squid Video

Pretty fantastic video from Japan of a giant squid eating another squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

CVE-2026-32929

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 01:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihyxszvyp2j 2026-04-02 01:18:28+00:00| seen| Telegram/7rLczVeBBv6SSIB10Z8cqxb4bee2TcHdurxt5OLTZQuJPU...

CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

CVE-2026-29078 Integer Underflow in Lexbor ISO‑2022‑JP Encoder

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

CVE-2026-29078

Lexbor CVE-2026-29078 affects the ISO-2022-JP encoder prior to version 2.7.0. The bug is caused by not resetting the temporary size variable between iterations, so ctx->buffer_used -= size with a stale size (3) underflows to SIZE_MAX. This underflow leads to memcpy called with a negative lengt...

CVE-2026-29078 Integer Underflow in Lexbor ISO‑2022‑JP Encoder

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

CVE-2026-29078 Integer Underflow in Lexbor ISO‑2022‑JP Encoder

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

CVE-2026-29078

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-bufferused -= size with a stale size = 3 causes an integer underflow that wraps to SIZEMAX. Afterwards, memcpy is called with ...

PT-2026-25330

Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx-buffer used -= size with a stale size = 3 causes an integer underflow that wraps to SIZE MAX. Afterwards, memcpy is called wit...

CVE-2026-27653

creationtimestamp| type| source ---|---|--- 2026-02-27 05:00:00+00:00| seen| https://jvn.jp/en/jp/JVN41357120/...

WordPress plugin Japanized for WooCommerce 授权问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...