ImageMagick: Memory Leak in MIFF encoder when allocaton fails

A memory leak will occur in the MIFF encoder when an allocation fails...

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

When an allocation fails in the TIFF encoder a small memory leak will occur...

ImageMagick: Memory Leak in hough lines operation when an operation fails

When a specific operation fails in the hough lines operation a small memory leak will occur...

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

When transforming an image to the log colorspace a small memory leak happens when the operation fails...

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

An incomplete fix of CVE-2026-49219 could result in a policy bypass...

MSC-2026-6375

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MSC-2026-6376

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

ImageMagick: Infinite Loop in connected-components when providing invalid arguments

When providing invalid arguments to the connected-components option an infinite loop will occur...

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...

CVE-2026-66144

Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a denial of service attack if a huge policy is retrieved. Users are recommended to upgrade to version 3.2.3, which fixes this issue by imposing a default maximu...

CVE-2026-10610

CVE-2026-10610 affects ESET security applications for macOS. It is a Local Privilege Escalation that could allow a low-privileged user to execute arbitrary code with elevated privileges. Exploitation would be LOCAL with LOW complexity and no user interaction required; the impact targets confident...

EUVD-2026-48534

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

[SECURITY] Fedora 44 Update: dotnet8.0-8.0.129-2.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

EUVD-2026-48439

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...

Oracle Linux 9 : LibRaw (ELSA-2026-19345)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19345 advisory. 0.21.1-2 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461 Tenable has extracted the preceding description block directly fro...

HPESBNW05085 rev.1 - HPE Unified Correlation Analyzer (UCA), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, XML External Entity XXE; Remote: Compromise of System Integrity, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Correlation Analyzer UCA All versions prior to 4.4.11 CVSS Scores:...

openSUSE 16: cockpit / cockpit-bridge / cockpit-devel / cockpit-firewalld / etc (openSUSE-SU-2026:21399-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21399-1 advisory. Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from glob...

CVE-2026-8308: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Polen Media Software and Information Services Website Template allows Reflected XSS. This issue affects Website Template: before v2...