CVE-2026-101279 | Medium | 6.5 | 2026-09-29 | A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc… |
CVE-2026-6103 | Medium | 4.3 | 2026-09-25 | phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to… |
CVE-2026-10758 | High | 7.5 | 2026-09-25 | Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer… |
CVE-2025-14181 | Medium | 6.5 | 2026-09-25 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed… |
CVE-2026-100208 | High | 7.5 | 2026-09-25 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-96749 | High | 8.4 | 2026-09-24 | An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built f… |
CVE-2026-88372 | High | 7.5 | 2026-09-24 | libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files. |
CVE-2026-88365 | Critical | 9.8 | 2026-09-24 | minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field. |
CVE-2026-88361 | High | 7.5 | 2026-09-24 | SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries. |
CVE-2026-88351 | Critical | 9.8 | 2026-09-24 | An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map3… |
CVE-2026-93577 | Critical | 9.9 | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain co… |
CVE-2026-6668 | High | 7.5 | 2026-09-23 | Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficie… |
CVE-2026-96674 | Medium | 4.4 | 2026-09-23 | alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds… |
CVE-2026-96611 | Medium | 6.9 | 2026-09-23 | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored… |
CVE-2026-89277 | Medium | 5.5 | 2026-09-22 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could… |
CVE-2026-18462 | | | 2026-09-22 | Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This is… |
CVE-2026-83601 | Medium | 6.5 | 2026-09-22 | Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ull_encoded pas… |
CVE-2026-81878 | Medium | 5.5 | 2026-09-22 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable be… |
CVE-2026-95619 | High | 7.7 | 2026-09-22 | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability co… |
CVE-2026-74765 | Medium | 6.5 | 2026-09-22 | Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode.
The XS backend… |
CVE-2026-88412 | Medium | 5.3 | 2026-09-21 | An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service… |
CVE-2026-94030 | Low | 3.1 | 2026-09-20 | A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_… |
CVE-2026-61723 | Medium | 6.8 | 2026-09-18 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsi… |
CVE-2026-61722 | Medium | 6.8 | 2026-09-18 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using… |
CVE-2026-57226 | Low | 3.7 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decom… |
CVE-2026-11725 | High | 8.8 | 2026-09-18 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request pro… |
CVE-2026-46655 | High | 7.8 | 2026-09-18 | virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submi… |
CVE-2026-84449 | Low | 3.7 | 2026-09-18 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an intege… |
CVE-2026-65969 | Medium | 5.5 | 2026-09-18 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0… |
CVE-2026-11378 | High | 8.8 | 2026-09-18 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list… |
CVE-2026-93652 | High | 7.5 | 2026-09-18 | Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS |
CVE-2026-40531 | Medium | 4.3 | 2026-09-18 | An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2… |
CVE-2026-93314 | Medium | 6.3 | 2026-09-18 | A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing… |
CVE-2026-93313 | Medium | 6.3 | 2026-09-18 | A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc… |
CVE-2026-93311 | Medium | 4.3 | 2026-09-18 | A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc o… |
CVE-2026-54571 | | | 2026-09-17 | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser i… |
CVE-2026-25290 | High | 7.8 | 2026-09-17 | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. |
CVE-2026-63126 | High | 7.5 | 2026-09-16 | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently valid… |
CVE-2026-77408 | | | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortstr property values t… |
CVE-2026-92259 | Medium | 5.5 | 2026-09-15 | Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-… |
CVE-2026-92248 | High | 7.8 | 2026-09-15 | A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer ov… |
CVE-2026-91746 | Medium | 4.3 | 2026-09-15 | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-91728 | Critical | 9.6 | 2026-09-15 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-76685 | High | 8.1 | 2026-09-15 | A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenti… |
CVE-2026-56889 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution… |
CVE-2026-55351 | High | 7.8 | 2026-09-15 | In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privi… |
CVE-2026-0194 | High | 8.4 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-91960 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of s… |
CVE-2026-84620 | High | 7.3 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
CVE-2026-84554 | Medium | 5.9 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacke… |
CVE-2026-84548 | High | 7.1 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing… |
CVE-2026-84544 | High | 7.5 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting… |
CVE-2026-84536 | Medium | 6.5 | 2026-09-14 | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connectin… |
CVE-2026-84517 | Medium | 5.5 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may… |
CVE-2026-84487 | Medium | 6.5 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
CVE-2026-65413 | Medium | 5.5 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may… |
CVE-2026-65408 | Medium | 5.5 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
CVE-2026-65391 | High | 8.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6… |
CVE-2026-65390 | High | 8.8 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS… |
CVE-2026-43788 | Medium | 6.6 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead t… |
CVE-2026-55093 | Medium | 6.1 | 2026-09-14 | Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multi… |
CVE-2026-90715 | High | 7.3 | 2026-09-14 | A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the co… |
CVE-2023-24288 | Low | 2.9 | 2026-09-14 | An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save sta… |
CVE-2026-90596 | Medium | 6.5 | 2026-09-13 | A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw… |
CVE-2026-90593 | High | 7.3 | 2026-09-13 | A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executi… |
CVE-2026-90473 | Medium | 5.3 | 2026-09-12 | msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element count… |
CVE-2026-54241 | High | 7.4 | 2026-09-11 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offse… |
CVE-2026-54240 | High | 7.4 | 2026-09-11 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a… |
CVE-2026-87020 | High | 8.1 | 2026-09-11 | An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied… |
CVE-2026-89146 | High | 7.5 | 2026-09-11 | libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A m… |
CVE-2026-89158 | Medium | 6.5 | 2026-09-11 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. |
CVE-2026-89157 | Medium | 5.7 | 2026-09-11 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern. |
CVE-2026-88914 | Medium | 4.4 | 2026-09-11 | A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an… |
CVE-2026-16174 | | | 2026-09-10 | Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially a… |
CVE-2026-88035 | Medium | 4.7 | 2026-09-10 | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past… |
CVE-2026-85228 | Critical | 9.1 | 2026-09-10 | An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remot… |
CVE-2026-88015 | Medium | 5.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or li… |
CVE-2026-87823 | High | 8.2 | 2026-09-09 | zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via neg… |
CVE-2026-56711 | High | 7.0 | 2026-09-09 | VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user intera… |
CVE-2026-87643 | Critical | 9.6 | 2026-09-09 | Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandb… |
CVE-2026-87630 | Medium | 4.3 | 2026-09-09 | Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromi… |
CVE-2026-81987 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2026-82007 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-75863 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-75862 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-75771 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-49927 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional… |
CVE-2026-49919 | High | 7.8 | 2026-09-08 | In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2026-45527 | Medium | 4.3 | 2026-09-08 | In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could l… |
CVE-2026-84000 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
CVE-2026-81959 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81949 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-77896 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. |
CVE-2026-77486 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-73002 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72995 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72990 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72986 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
CVE-2026-71336 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. |
CVE-2026-70581 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |