29106 matches found
CVE-2026-50396
CVE-2026-50396 is a Windows Kernel-Mode Driver vulnerability described as a use-after-free in kernel-mode drivers that can allow an authenticated attacker to elevate privileges locally. The issue affects Windows kernel components classified under Windows Kernel-Mode Drivers and is mapped to CVSS ...
CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-50393
CVE-2026-50393 is a Windows kernel-mode driver use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry is supported by multiple sources in connected documents, including NVD/MSRC summaries. Affected component: Windows Kernel-Mode Drivers (kernel s...
CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-58602 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-58602 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-42982
CVE-2026-42982 affects Windows Secure Kernel Mode. The issue is improper validation of input consistency within that subsystem, enabling an authorized user to escalate privileges locally. The vulnerability is described as a local, user‑level privilege escalation with high impact (confidentiality,...
CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
...
DEBIAN-CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
PYSEC-2026-3453
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
DEBIAN-CVE-2026-59198
Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
UBUNTU-CVE-2026-59198
Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...
UBUNTU-CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
CVE-2026-59198
Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...
CVE-2026-59198 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...
CVE-2026-59205 Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.applyim, imOut API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0...
