PT-2026-107781

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

PT-2026-108154

Name of the Vulnerable Software and Affected Versions dot-access versions prior to 1.0.1 Description A prototype pollution issue exists where attackers can modify Object.prototype by providing a specially crafted dotted path to the set function. By controlling the path, such as through...

CVE-2026-107737: Improper Validation of Array Index

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.20369 when WebView2 is absent or cannot initialize, ParseProtoUrl accepts the signed host component of an its:// URL and FindHtmlWindowById uses it directly as an index into gHtmlWindows. Opening a...

CVE-2026-107733: NULL Pointer Dereference

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

CVE-2026-107703: Improper Neutralization of Special Elements used in an OS Command

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by...

CVE-2026-106433: Access of Resource Using Incompatible Type

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106431: Out-of-bounds Write

An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...

PT-2026-107942

Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...

Security update for distribution (important)

openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22039-1 Rating: important References: bsc1283762 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

EUVD-2026-93574

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer...

GHSA-J9GM-C75J-XC9Q ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

Summary ImageSharp's TIFF CCITT Group 3 T4 encoder can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. The unchecked writes can corrupt process memory and terminate the process. This report concerns only the T4 CcittGroup3Fax encoder path. It replaces the prio...

EUVD-2026-93554

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index...

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

Summary SixLabors.ImageSharp can terminate a process when an application decodes an attacker-supplied 32-bit floating-point TIFF as Image and applies HistogramEqualization. An IEEE positive-infinity TIFF sample reaches a non-finite or otherwise out-of-range HalfVector4 component, depending on the...

GHSA-8MCQ-6WMR-JRJV Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Affected versions and vulnerable location - Confirmed at ae2113b current HEAD. - Sink: rows.go:967 ws.SheetData.RowrowIdx.CcolNum-1 = colData inside checkRow. - checkRow computes lastCol from the column of the last cell in document order rows.go:940, allocates targetList of that length, then...

Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Affected versions and vulnerable location - Confirmed at ae2113b current HEAD. - Sink: rows.go:967 ws.SheetData.RowrowIdx.CcolNum-1 = colData inside checkRow. - checkRow computes lastCol from the column of the last cell in document order rows.go:940, allocates targetList of that length, then...

CVE-2026-107222

The Excelize Go library, used for reading and writing Microsoft Excel spreadsheets, is vulnerable in versions 2.7.0 to 2.11.0 . The GetConditionalFormats function fails to perform sufficient length or nil checks when extracting conditional-formatting rules. Specifically, it indexes required child...

CVE-2026-107214

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allocate, and divide using attacker-controlled values...

CVE-2026-107213

The Excelize Go library (versions 2.9.0 to 2.11.0 ) contains a nil-pointer dereference vulnerability in the GetSlicers function. The issue occurs because the library checks for an extLst element but fails to verify the existence of the independently optional ws.Drawing element before dereferencin...

Free of Memory not on the Heap

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Free of Memory not on the Heap

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...