CVE-2026-109242

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit this vulnerability by sending a crafted sequence of progressive display tile updates to a connecting client. Because decompression buffers are allocated without being initialized, processing these updates can...

CVE-2026-94453

A use-after-free flaw was found in Libreswan's IKE-over-TCP handling. When a TCP connection closes and additional packet processing occurs for the same connection tuple, the IKE daemon may access a previously freed interface endpoint object. A remote, unauthenticated attacker may exploit this fla...

CVE-2026-109257

A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...

CVE-2026-109254

A flaw was found in FreeRDP. A use-after-free vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client. During static audio channel disconnection, audio data structures are released before the background playback thread finishes...

CVE-2026-109255

A flaw was found in FreeRDP. An integer truncation issue in license stream length validation allows a malicious Remote Desktop Protocol RDP server to bypass size checks by sending a specially crafted licensing request. This flaw leads to an undersized memory allocation and a heap-based buffer...

CVE-2026-109252

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...

CVE-2026-109248

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a heap out-of-bounds read by returning a specially crafted response during clipboard operations. When a user attempts to paste files copied from the remote session into a local application, improper handling o...

CVE-2026-109152

A flaw was found in scp.py. When receiving files over a Secure Copy Protocol SCP connection, a malicious remote server can supply manipulated file paths containing directory traversal sequences. This flaw allows an attacker to write or overwrite files outside the intended destination directory on...

CVE-2026-49264

A flaw was found in oauthlib. When JSON with Padding JSONP support is enabled on the token revocation endpoint, the application fails to validate user-supplied callback parameters before reflecting them into the response. A remote attacker could exploit this flaw by submitting a crafted callback...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

CVE-2026-109279

A flaw was found in ImageMagick. Due to improper synchronization during concurrent security policy access, simultaneous reads and writes across multiple threads can trigger a race condition, leading to a heap buffer overwrite. An attacker capable of inducing concurrent security policy operations...

CVE-2026-108577

A flaw was found in libmodplug. A remote attacker could exploit this issue by enticing a user or application to process a specially crafted ABC music format file handled by the abcaddgchord function. Successful exploitation causes excessive resource consumption, resulting in a denial of service D...

CVE-2026-107373

A flaw was found in perl-extutils-typemaps-default. When converting Perl values to C++ strings in the TSTDSTRING typemap, the length of an argument may be evaluated before string conversion occurs due to unspecified argument evaluation order. An attacker who supplies non-string input, such as a...

CVE-2026-108978

A flaw was found in rlottie. A heap-based buffer overflow vulnerability occurs when the library processes environment variables. A local attacker could exploit this issue by enticing a user to execute an application with specially crafted environment variables, leading to an application crash and...

CVE-2026-104102

A flaw was found in copyparty. When the File Transfer Protocol FTP or FTP Secure FTPS service is enabled, improper handling of upload paths allows an authenticated remote attacker to create files outside of configured storage directories. By supplying path traversal sequences during file upload, ...

CVE-2026-104140

A flaw was found in QGIS. The QGIS Server component fails to properly escape feature property data when rendering HTML responses for Web Feature Service WFS endpoints. A remote attacker can exploit this issue by injecting malicious scripts into the properties of a published writable vector layer...

CVE-2026-108836

A flaw was found in Ollama. Improper input validation within the model name parsing logic allows a remote attacker to conduct a Server-Side Request Forgery SSRF attack through the pull API. By supplying a crafted model name, an attacker can coerce the server into sending unauthorized network...

CVE-2026-103902

A flaw was found in libdigidocpp. A remote attacker can create forged digital signatures that are improperly verified and incorrectly displayed as valid. This flaw allows an attacker to bypass signature validation checks and present fraudulent or altered documents as authentic...

CVE-2026-108985

A flaw was found in libnfs. During data decoding, the library fails to honor the maximum buffer size specified by the caller when processing data structures such as strings, bytes, and arrays. A remote attacker could exploit this vulnerability by providing specially crafted network data, triggeri...

CVE-2026-107794

A flaw was found in ExtUtils::Typemaps::STL::List. An attacker could exploit this vulnerability by supplying an empty list to an application using the affected typemap. When processing an empty list, an integer underflow occurs during memory allocation calculations, causing the application to...

CVE-2026-92705

A flaw was found in Aegisub. The application automatically loads and runs automation scripts referenced within Advanced SubStation Alpha ASS subtitle project files without prompting the user for confirmation. By tricking a user into opening a specially crafted subtitle file referencing a maliciou...

CVE-2013-10076

A flaw was found in perl-extutils-typemaps-default. An integer underflow occurs when processing an empty list in vector typemaps, causing the application to calculate an excessively large buffer size. An attacker can exploit this vulnerability by supplying empty list input, leading to memory...

CVE-2026-109786

A flaw was found in fail2ban. The OpenSSH service filter improperly parses log entries when identifying offending network addresses. A remote, unauthenticated attacker can supply a crafted username during login attempts, causing the service to associate failed authentication events with an...

CVE-2026-103658

A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue occurs due to an integer calculation error during buffer capacity checks in the read-only dictionary...

CVE-2026-109561

A flaw was found in goose. An authorization bypass vulnerability allows tools to run without required user confirmation even when manual approval mode is selected. This occurs because read-only tool annotations from previous sessions are not properly cleared when switching approval modes...

CVE-2026-109379

A flaw was found in Cockpit. An observable timing discrepancy in the authentication mechanism allows an unauthenticated remote attacker to enumerate valid user accounts. By submitting login requests and measuring response times, an attacker can identify whether a username or email address exists...

CVE-2026-91135

A flaw was found in Apache Thrift. A remote attacker can exploit a heap-based buffer overflow in the C++ transport component to achieve arbitrary code execution or cause a Denial of Service DoS through an application crash. The vulnerability occurs when an application enables compression transfor...

CVE-2026-109380

A flaw was found in modern-tar. A remote attacker can trigger a Denial of Service DoS by supplying a specially crafted archive containing malformed entry size values. When processing the invalid data, the parser fails to properly calculate file sizes and buffers data indefinitely, leading to memo...

CVE-2026-103061

A flaw was found in gleam. When downloading dependencies, the build tool uses the application name from package metadata to determine the build directory path without validating it. A malicious package publisher can supply path traversal sequences or an absolute path, causing arbitrary directorie...

CVE-2026-109282

A flaw was found in ImageMagick. A type confusion vulnerability exists in the INFO, JSON, and YAML encoders when writing images in a compressed format. An attacker who can induce the application to write an image using these encoders can trigger an unexpected process crash, leading to a Denial of...

CVE-2026-109280

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS or memory corruption by providing crafted -fx expressions under low-memory conditions. When a memory allocation fails during expression processing, the application accesses previously freed memory, leading to an...

CVE-2026-109278

A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service DoS through memory exhaustion. The issue occurs during wavelet-denoise image processing, where the application fails to release allocated memory if a required resource cannot be acquired. By...

CVE-2026-109277

A flaw was found in ImageMagick. Missing checks in the -script operation allow an attacker to close file descriptors—handles used by the operating system to access open files or resources—that were not opened by the active task. This vulnerability allows an attacker to circumvent configured...

CVE-2026-109272

A flaw was found in ImageMagick. An attacker can trigger a NULL pointer dereference in the PostScript decoder by submitting a specially crafted PostScript file for processing when a policy limit is reached. This issue causes the application to crash, resulting in a Denial of Service DoS...

CVE-2026-109270

A flaw was found in ImageMagick. This vulnerability allows a local attacker to cause a Denial of Service DoS due to a memory leak in the -process command-line option. By repeatedly invoking this option with crafted arguments, allocated memory is not properly released, gradually exhausting system...

CVE-2026-109264

A flaw was found in ImageMagick. An attacker who controls a file name processed by the application can cause a Denial of Service DoS by crashing the process. This issue is caused by uncontrolled recursion within the Magick Vector Graphics MVG decoder, which exhausts available stack memory when...

CVE-2026-109268

A flaw was found in ImageMagick. A remote attacker can exploit this issue by providing a specially crafted CMYK image that is processed into a PDF document using JPEG2000 compression. This causes the PDF writer to access previously released memory a use-after-free condition, which can crash the...

CVE-2026-109260

A flaw was found in ImageMagick. A memory leak in the PNG encoder allows a remote attacker to cause a Denial of Service DoS. When library initialization fails during PNG encoding operations, allocated memory is not released. By repeatedly triggering these failed encoding requests, an attacker can...

CVE-2026-109263

A flaw was found in ImageMagick. The YUV image encoder fails to properly release allocated memory when an internal operation fails during image processing. A remote attacker can exploit this vulnerability by submitting specially crafted input, resulting in memory exhaustion and a potential Denial...

CVE-2026-109261

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by providing specially crafted images for GIF conversion that cause color quantization to fail. Because allocated memory is not freed when this failure occurs, repeated processing requests continuously leak memor...

CVE-2026-83535

A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer Security TLS, the basic authentication mechanism is silently bypassed. This fail-open design allows an adjacent network attacker to access sensitive Open...

CVE-2026-85471

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-83536

A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability allows an unauthenticated, remote attacker to initiate multiple slow HTTP header connections. By trickling header...

CVE-2026-109349

A flaw was found in gix-pack. A malicious remote server can trigger a Denial of Service DoS by returning a crafted pack header declaring version 3 during a repository clone or fetch operation. Because the header decoder triggers an internal assertion failure when encountering this version, the...

CVE-2026-109448

A flaw was found in postgresql-odbc. An integer wraparound vulnerability in the SQLBindParameter function allows an attacker who controls the number of parameters bound in a database query to corrupt heap memory. By binding an excessively large number of parameters on a single statement, an...

CVE-2026-109350

A flaw was found in gix-pack. A malicious remote repository can cause a Denial of Service DoS by serving a crafted Git packfile containing malformed delta offset entries during a fetch operation. Processing these entries leads to an unhandled application crash, abruptly terminating the fetch...

CVE-2026-109281

A flaw was found in ImageMagick. An attacker can trigger a heap buffer over-read by providing a specially crafted -fx expression for processing. This vulnerability allows the application to read memory beyond allocated boundaries, potentially leading to unauthorized information disclosure or a...

CVE-2026-109276

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting crafted JPEG Network Graphics JNG images for processing. The JNG decoder fails to remove temporary files during the handling of these inputs, leading to excessive disk space consumption...

CVE-2026-109275

A flaw was found in ImageMagick. When a PostScript renderer is enabled, a remote attacker can supply a specially crafted Magick Vector Graphics MVG file to inject code into the rendering process. Exploitation of this flaw may lead to arbitrary code execution or a denial of service on the host...

CVE-2026-109262

A flaw was found in ImageMagick. This flaw allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. When the file is processed by the Scalable Vector Graphics SVG encoder, the application fails to properly release allocated memory, leading to excessiv...