[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-86957 | 20 Oct 2026 | CVSS 6.5 | Apple iOS and iPadOSAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS… | |
| CVE-2026-86959 | 20 Oct 2026 | Not scored yet | Apple iOS and iPadOSAn input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS… | |
| CVE-2026-86961 | 20 Oct 2026 | CVSS 7.8 | Apple iOS and iPadOSA race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be… | |
| CVE-2026-86962 | 20 Oct 2026 | CVSS 5.5 | Apple iOS and iPadOSA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS… | |
| CVE-2026-86914 | 20 Oct 2026 | CVSS 5.5 | Apple macOSAn information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS… | |
| CVE-2026-86915 | 20 Oct 2026 | CVSS 4.7 | Apple macOSA race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system… | |
| CVE-2026-86918 | 20 Oct 2026 | CVSS 4.3 | Apple iOS and iPadOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27… | |
| CVE-2026-86919 | 20 Oct 2026 | CVSS 8.8 | Apple iOS and iPadOSA stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden… | |
| CVE-2026-86921 | 20 Oct 2026 | CVSS 6.2 | Apple iOS and iPadOSA permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate… | |
| CVE-2026-86922 | 20 Oct 2026 | CVSS 8.8 | Apple SafariA type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27… | |
| CVE-2026-86928 | 20 Oct 2026 | CVSS 5.5 | Apple macOSA path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected… | |
| CVE-2026-86932 | 20 Oct 2026 | CVSS 5.5 | Apple macOSAn authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access… | |
| CVE-2026-86933 | 20 Oct 2026 | CVSS 3.3 | Apple macOSA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access… | |
| CVE-2026-86935 | 20 Oct 2026 | Not scored yet | Apple macOSThis issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access… | |
| CVE-2026-86907 | 20 Oct 2026 | CVSS 4.4 | Apple macOSAn authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin… | |
| CVE-2026-86913 | 20 Oct 2026 | CVSS 5.4 | Apple iOS and iPadOSA use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS… | |
| CVE-2026-86871 | 20 Oct 2026 | CVSS 5.9 | Apple macOSAn integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7… | |
| CVE-2026-86872 | 20 Oct 2026 | CVSS 5.4 | Apple SafariA logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted… | |
| CVE-2026-86874 | 20 Oct 2026 | CVSS 3.3 | Apple XcodeAn out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to… | |
| CVE-2026-86875 | 20 Oct 2026 | CVSS 4.3 | Apple XcodeAn input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may… | |
| CVE-2026-84613 | 20 Oct 2026 | CVSS 6.5 | Apple iOS and iPadOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27… | |
| CVE-2026-86868 | 20 Oct 2026 | Not scored yet | Apple macOSAn authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe… | |
| CVE-2026-84579 | 20 Oct 2026 | Not scored yet | Apple macOSA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file… | |
| CVE-2026-84582 | 20 Oct 2026 | Not scored yet | Apple iOS and iPadOSA privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS… | |
| CVE-2026-84547 | 20 Oct 2026 | CVSS 3.5 | Apple macOSA memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe… | |
| CVE-2026-77936 | 20 Oct 2026 | CVSS 9.8 | letta-ai lettaLetta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are… | |
| CVE-2026-77937 | 20 Oct 2026 | CVSS 8.1 | letta-ai lettaLetta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted… | |
| CVE-2026-77938 | 20 Oct 2026 | CVSS 6.5 | letta-ai lettaLetta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox… | |
| CVE-2026-84490 | 20 Oct 2026 | CVSS 2.0 | Apple iOS and iPadOSThis issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked… | |
| CVE-2026-84508 | 20 Oct 2026 | CVSS 5.5 | Apple iOS and iPadOSThis issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… | |
| CVE-2026-75128 | 20 Oct 2026 | CVSS 9.8 | chatchat-space Langchain-ChatchatLangchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving… | |
| CVE-2026-77926 | 20 Oct 2026 | CVSS 8.8 | apconw Aix-DBAix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the… | |
| CVE-2026-77930 | 20 Oct 2026 | CVSS 9.8 | EvoScientistEvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to… | |
| CVE-2026-77932 | 20 Oct 2026 | CVSS 9.8 | eosphoros-ai DB-GPTDB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock… | |
| CVE-2026-77933 | 20 Oct 2026 | CVSS 9.8 | eosphoros-ai DB-GPTDB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and… | |
| CVE-2026-77934 | 20 Oct 2026 | CVSS 8.8 | coze-dev coze-studioCoze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code… | |
| CVE-2026-77935 | 20 Oct 2026 | CVSS 8.3 | coze-dev coze-studioCoze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other… | |
| CVE-2026-65396 | 20 Oct 2026 | CVSS 5.5 | Apple macOSA buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An… | |
| CVE-2026-65372 | 20 Oct 2026 | CVSS 4.7 | Apple macOSA race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A… | |
| CVE-2026-65379 | 20 Oct 2026 | CVSS 5.5 | Apple macOSThe issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe… | |
| CVE-2026-65356 | 20 Oct 2026 | CVSS 5.5 | Apple macOSAn access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An… | |
| CVE-2026-28850 | 20 Oct 2026 | CVSS 5.5 | Apple visionOSAn authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user… | |
| CVE-2026-28853 | 20 Oct 2026 | CVSS 7.8 | Apple macOSThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges. | |
| CVE-2026-28854 | 20 Oct 2026 | Not scored yet | Apple macOSThe issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not… | |
| CVE-2026-109440 | 20 Oct 2026 | CVSS 8.8 | ginlix-ai LangAlphaLangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by… | |
| CVE-2026-109441 | 20 Oct 2026 | CVSS 5.8 | ginlix-ai LangAlphaLangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default… | |
| CVE-2026-109442 | 20 Oct 2026 | CVSS 9.8 | cas-bigdatalab piflowpiflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream… | |
| CVE-2026-109443 | 20 Oct 2026 | CVSS 8.8 | jd-opensource JoySafeterJoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an… | |
| CVE-2026-109444 | 20 Oct 2026 | CVSS 9.8 | Tracer-Cloud opensreOpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without… | |
| CVE-2026-105297 | 20 Oct 2026 | CVSS 7.5 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded… | |
| CVE-2026-105298 | 20 Oct 2026 | CVSS 6.3 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache… | |
| CVE-2026-109395 | 20 Oct 2026 | CVSS 9.1 | ning compress-lzfNing compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to… | |
| CVE-2026-8355 | 20 Oct 2026 | CVSS 5.4 | IBM ContextForge MCP GatewayIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway… | |
| CVE-2026-109126 | 20 Oct 2026 | CVSS 8.8 | IBM Verify Identity AccessIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated… | |
| CVE-2026-112373 | 20 Oct 2026 | CVSS 6.5 | H3C Magic NX15A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such… | |
| CVE-2026-107366 | 20 Oct 2026 | CVSS 8.3 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete… | |
| CVE-2026-107400 | 20 Oct 2026 | CVSS 8.8 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper… | |
| CVE-2026-105453 | 20 Oct 2026 | CVSS 8.4 | IBM Sterling Connect Direct for UnixIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due… | |
| CVE-2026-77684 | 19 Oct 2026 | CVSS 5.7 | zephyrproject zephyrThe Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still… | |
| CVE-2026-112371 | 19 Oct 2026 | CVSS 9.9 | H3C Magic NX15A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface… | |
| CVE-2026-112372 | 19 Oct 2026 | CVSS 6.6 | H3C Magic NX15A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the… | |
| CVE-2026-112991 | 19 Oct 2026 | CVSS 6.3 | misp-modulesThe html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation… | |
| CVE-2026-19178 | 19 Oct 2026 | CVSS 6.8 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to… | |
| CVE-2026-19595 | 19 Oct 2026 | CVSS 6.1 | zephyrproject zephyrThe user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and… | |
| CVE-2025-36061 | 19 Oct 2026 | CVSS 6.5 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to… | |
| CVE-2025-36069 | 19 Oct 2026 | CVSS 5.5 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate… | |
| CVE-2025-36252 | 19 Oct 2026 | CVSS 6.3 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an… | |
| CVE-2026-112370 | 19 Oct 2026 | CVSS 9.9 | H3C Magic NX15A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a… | |
| CVE-2026-53995 | 19 Oct 2026 | CVSS 8.2 | mlflowMLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control… | |
| CVE-2026-112898 | 19 Oct 2026 | CVSS 6.9 | Pillow: Image.quantize() with empty palette leaks uninitialized stack memoryPillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty… | Fix |
| CVE-2026-112900 | 19 Oct 2026 | CVSS 9.2 | Pillow: Argument Injection in Ghostscript call, potentially leading into RCEPillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input… | Fix |
| CVE-2026-112901 | 19 Oct 2026 | CVSS 6.9 | Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutesPillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In… | Fix |
| CVE-2026-112892 | 19 Oct 2026 | CVSS 8.7 | Pillow: MSP RLE decoder expands a tiny file into unbounded memoryPillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The… | Fix |
| CVE-2026-112893 | 19 Oct 2026 | CVSS 8.2 | Pillow: Invalid free in FreeType glyph rendering when a stroker is activePillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active… | Fix |
| CVE-2026-112894 | 19 Oct 2026 | CVSS 8.7 | Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames… | Fix |
| CVE-2026-112895 | 19 Oct 2026 | CVSS 8.7 | Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation… | Fix |
| CVE-2026-112896 | 19 Oct 2026 | CVSS 8.8 | Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readPillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane… | Fix |
| CVE-2026-112897 | 19 Oct 2026 | CVSS 8.7 | Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripsPillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of… | Fix |
| CVE-2026-112405 | 19 Oct 2026 | CVSS 8.7 | Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first… | Fix |
| CVE-2026-112406 | 19 Oct 2026 | CVSS 8.7 | Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cyclePillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages()… | Fix |
| CVE-2026-112891 | 19 Oct 2026 | CVSS 6.9 | Pillow: Quadratic GIF comment copying during savePillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment… | Fix |
| CVE-2026-112398 | 19 Oct 2026 | CVSS 9.2 | python-pillow PillowPillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile… | |
| CVE-2026-112399 | 19 Oct 2026 | CVSS 8.7 | Pillow: APNG background disposal allocates full canvas before decompression bomb checkPillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying… | Fix |
| CVE-2026-112400 | 19 Oct 2026 | CVSS 8.7 | Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoSPillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In… | Fix |
| CVE-2026-112401 | 19 Oct 2026 | CVSS 6.9 | Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek()… | Fix |
| CVE-2026-112402 | 19 Oct 2026 | CVSS 8.7 | Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transformPillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation… | Fix |
| CVE-2026-112403 | 19 Oct 2026 | CVSS 9.2 | Pillow: Heap buffer overflow in ImagingJpegDecodePillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft… | Fix |
| CVE-2026-112404 | 19 Oct 2026 | CVSS 8.8 | Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsPillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff… | Fix |
| CVE-2026-112358 | 19 Oct 2026 | CVSS 4.1 | TiBillet LespassA weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function… | |
| CVE-2026-112360 | 19 Oct 2026 | CVSS 8.0 | Netis EAP930A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of… | |
| CVE-2026-112361 | 19 Oct 2026 | CVSS 6.3 | DolibarrA vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component… | |
| CVE-2026-112392 | 19 Oct 2026 | CVSS 8.2 | Pillow: NULL dereference in ImagingExpand via rank filters on zero-size imagesPillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image… | Fix |
| CVE-2026-112396 | 19 Oct 2026 | CVSS 5.9 | Pillow: Heap use-after-free when encoding TIFF to an in-memory bufferPillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to… | Fix |
| CVE-2026-112397 | 19 Oct 2026 | CVSS 8.7 | Pillow: Out-of-bounds access in _imagingmorph on a zero-width imagePillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width… | Fix |
| CVE-2026-112257 | 19 Oct 2026 | CVSS 7.8 | Red Hat Enterprise Linux 10A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that… | |
| CVE-2026-112258 | 19 Oct 2026 | CVSS 7.8 | Red Hat Enterprise Linux 10A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a… | |
| CVE-2026-112261 | 19 Oct 2026 | CVSS 7.8 | Red Hat Enterprise Linux 10A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process… | |
| CVE-2026-105814 | 19 Oct 2026 | CVSS 5.3 | TP-Link Systems Inc. Tapo C210 v3.6TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected… | |
| CVE-2026-105815 | 19 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C210 v3.6TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed… | |
| CVE-2026-76787 | 19 Oct 2026 | CVSS 5.9 | zephyrproject zephyrThe UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe()… |
Page 30 of 168