CVE-2026-34539

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can trigger a heap-buffer-overflow HBO in CTiffImg::WriteLine. The issue is observable under AddressSanitizer as an out-of-bounds heap read...

CVE-2026-34542

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stack-buffer-overflow SBO in CIccCalculatorFunc::Apply when processed via iccApplyNamedCmm. Under AddressSanitizer, the failure is reported as...

CVE-2026-3987

creationtimestamp| type| source ---|---|--- 2026-04-01 22:45:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihrfdqeim25 2026-04-01 23:28:03+00:00| seen| Telegram/9GieXm2mvI1hTc72mHyuKx2RXs9Lk1GMse1mK9qILNsF30 2026-04-01 23:28:25+00:00| seen|...

CVE-2025-58669

creationtimestamp| type| source ---|---|--- 2026-04-01 22:28:06+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mihqgjumqp2c...

CVE-2026-25835

creationtimestamp| type| source ---|---|--- 2026-04-01 21:40:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mihnqjndcd2l 2026-04-02 05:26:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miihs2siqs2s...

CVE-2026-25833

creationtimestamp| type| source ---|---|--- 2026-04-01 21:39:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mihnoq6bmr2g 2026-04-02 05:25:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miihrkskbw25 2026-04-02 05:36:06+00:00| seen|...

CVE-2026-34072

creationtimestamp| type| source ---|---|--- 2026-04-01 20:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihlad64el2d 2026-04-02 06:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijrtufle2s 2026-04-03 17:26:02+00:00| published-proof-of-concept|...

CVE-2026-34455

creationtimestamp| type| source ---|---|--- 2026-04-01 20:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkynlnrb2n 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ...

CVE-2026-34872

creationtimestamp| type| source ---|---|--- 2026-04-01 20:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihklx2ml52o 2026-04-02 04:02:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miid44zikf2x 2026-04-03 21:40:09+00:00| seen|...

CVE-2026-20174

creationtimestamp| type| source ---|---|--- 2026-04-01 18:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihbxcp63j2i...

CVE-2026-35471

creationtimestamp| type| source ---|---|--- 2026-04-01 17:29:12+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-6qcc-6q27-whp8 2026-04-06 22:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miue2nxbnm2o 2026-04-06 23:22:19+00:00...

CVE-2026-3139

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-20151

creationtimestamp| type| source ---|---|--- 2026-04-01 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/ 2026-04-01 18:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihccxxlev2g 2026-04-02 10:08:50+00:00| seen|...

CVE-2026-33544

creationtimestamp| type| source ---|---|--- 2026-04-01 15:49:44+00:00| published-proof-of-concept| https://github.com/tinyauthapp/tinyauth/security/advisories/GHSA-9q5m-jfc4-wc92 2026-04-02 17:37:18+00:00| seen| Telegram/asfs2UkHDA2dEAWxK7wNvn0OefGesF-RFz1ocNui3XpVnY 2026-04-03 10:00:36+00:00|...

CVE-2026-25371

creationtimestamp| type| source ---|---|--- 2026-04-01 15:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3migzvv5tuw2w 2026-04-06 21:20:35+00:00| published-proof-of-concept| Telegram/MEpsfFR7A3mQ2dGKH0pRdtzvADr6R8o0dal6eRmpMO8wsk...

CVE-2026-34430

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 16:29:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4frky4p2r 2026-04-01 16:50:34+00:00| seen|...

CVE-2026-29782

creationtimestamp| type| source ---|---|--- 2026-04-01 15:10:11+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-whv5-4q2f-q68g 2026-04-01 15:10:11+00:00| published-proof-of-concept|...

CVE-2026-35093

creationtimestamp| type| source ---|---|--- 2026-04-01 14:51:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwdkm2v2r 2026-04-01 14:52:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3migwxqyjga2h 2026-04-01 15:26:18+00:00|...

CVE-2026-23410

A flaw was found in the Linux kernel's AppArmor security module. This vulnerability, a race condition, allows a local attacker to trigger a use-after-free error by simultaneously opening rawdata files and removing an associated AppArmor profile. This can lead to the system accessing freed memory,...

CVE-2026-23405

creationtimestamp| type| source ---|---|--- 2026-04-01 11:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migms3r3at27 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen...