CVEs
Browse the synced catalog, newest first.
- CVE-2026-113961An authorization issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113960This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-56712Replicate Cog 0.23.1 SSRF via cog.File and cog.Path URL Inputsreplicate cog
- CVE-2026-123806python-tuf: Platform-dependent delegation path matchingtheupdateframework python-tuf · tuf
- CVE-2026-84410apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processingCanonical apport
- CVE-2026-86692apport: Arbitrary file creation or overwrite via path traversal in base64-encoded problem report keysCanonical apport
- CVE-2026-119078Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keysApache Software Foundation commons-codec:commons-codec
- CVE-2026-124077Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)Apache Software Foundation commons-codec:commons-codec · Ap…
- CVE-2026-123805SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS)sipsorcery-org sipsorcery
- CVE-2026-124987mikefarah yq encoder_properties.go Encode escape outputmikefarah yq
- CVE-2026-87857Temporal Server workflow-history pagination token is not bound to the requested namespace and workflowTemporal Technologies go.temporal.io/server
- CVE-2026-124834iomad Password Field company_user.php store_temporary_password information disclosureiomad
- CVE-2026-125270FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M EncoderFFmpeg
- CVE-2026-125269FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.cFFmpeg
- CVE-2026-125268FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD DecoderFFmpeg
- CVE-2026-125267FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC DecoderFFmpeg
- CVE-2026-125266FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 23FFmpeg
- CVE-2026-125265FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream PointerFFmpeg
- CVE-2026-125264FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC CountFFmpeg
- CVE-2026-125263FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement DimensionsFFmpeg
- CVE-2026-125262FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement DecodingFFmpeg
- CVE-2026-125261FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.cFFmpeg
- CVE-2026-125260FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE PathFFmpeg
- CVE-2026-125259FFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks EncoderFFmpeg
- CVE-2026-125258FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.cFFmpeg
- CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis SearchFFmpeg
- CVE-2026-125256FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes RoutineFFmpeg
- CVE-2026-125255FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated DecodingFFmpeg
- CVE-2026-125254FFmpeg through 9.0.2 Division by Zero via VVC ff_vvc_slice_rpl()FFmpeg
- CVE-2026-125253FFmpeg through 9.0.2 VP9 CBS Superframe Integer Overflow Out-of-Bounds ReadFFmpeg