[ Vendor · 7 CVEs ]
Scribus
CVEs affecting Scribus published in the last 30 days, plus any Scribus CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104064 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers… | |
| CVE-2026-104065 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an… | |
| CVE-2026-104066 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when… | |
| CVE-2026-104067 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap… | |
| CVE-2026-104061 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked… | |
| CVE-2026-104062 | 30 Oct 2026 | CVSS 7.8 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows… | |
| CVE-2026-104063 | 30 Oct 2026 | CVSS 6.1 | ScribusScribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding… |