[ Vendor · 2 CVEs ]
NetSurf
CVEs affecting NetSurf published in the last 30 days, plus any NetSurf CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111138 | 15 Oct 2026 | CVSS 5.5 | NetSurf libnsbmpNetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound… | |
| CVE-2026-111139 | 15 Oct 2026 | CVSS 5.5 | NetSurf libnsbmpNetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the… |