Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting…EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bi…Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is out of bounds The module loader doesn't check fo…EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num_tx_queues…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory r…EPSS 0.2%Apr 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled val…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr(…EPSS 0.2%Apr 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUE…Apr 22, 2026
- Critical9.8F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Apr 22, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Apr 21, 2026
- High7.5Memory safety bugs present in Firefox 149 and Thunderbird 149.Apr 21, 2026
- High7.3Incorrect boundary conditions in the WebRTC component.Apr 21, 2026
- Critical9.8Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an expl…Apr 20, 2026
- Critical9.8SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.Apr 18, 2026
- Critical9.8SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.Apr 18, 2026
- Critical9.8SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.Apr 18, 2026
- High8.6editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing.Apr 18, 2026
- High8.2Firebird is an open-source relational database management system.Apr 17, 2026
- High7.5A flaw was found in dnsmasq.Apr 17, 2026
- High8.3Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox esca…Apr 15, 2026
- High8.8Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Apr 15, 2026
- High7.2An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may…Apr 14, 2026
- High7.8Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Apr 14, 2026