Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,123 vulnerabilities match.

CVESeveritySummary
CVE-2026-1111646.8 MediumUADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module
CVE-2026-1111636.8 MediumWildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi
CVE-2026-1111626.9 MediumWildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmp
CVE-2026-1111616.9 MediumlibADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates
CVE-2026-1111608.7 HighLightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization
CVE-2026-1111596.9 Mediumlibewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing
CVE-2026-1111586.8 MediumEarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect
CVE-2026-1111576.9 MediumSoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding
CVE-2026-1111566.9 MediumlibTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header
CVE-2026-1111556.9 MediumlibTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c
CVE-2026-1111546.9 MediumlibTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFont Loader
CVE-2026-1111536.8 MediumGame Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
CVE-2026-1111526.8 MediumGame Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader
CVE-2026-1111516.9 MediumOpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder
CVE-2026-1111506.8 MediumValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk
CVE-2026-1111496.9 MediumFreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits
CVE-2026-1111486.8 Mediumlibsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune
CVE-2026-1111476.9 MediumLibyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value
CVE-2026-1111466.9 Mediumytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c
CVE-2026-1111456.9 Mediumytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF
CVE-2026-1111446.8 Mediumlibansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin
CVE-2026-1111436.8 MediumAnsilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decoding
CVE-2026-1111426.8 MediumZziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst
CVE-2026-1111415.7 Mediumzziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsing
CVE-2026-1111406.9 Mediumlibregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data
CVE-2026-1111396.8 MediumNetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask
CVE-2026-1111386.8 MediumNetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders
CVE-2026-1111376.9 Mediumlibsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
CVE-2026-1111366.9 MediumlibInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid
CVE-2026-1111356.9 Mediumlibfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data
CVE-2026-1111346.9 Mediumlibfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_data
CVE-2026-1111336.9 Mediumlibfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_data
CVE-2026-1111326.9 MediumGNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element
CVE-2026-1111316.9 Mediumlibxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker
CVE-2026-1111306.9 MediumOpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
CVE-2026-1111296.8 MediumAssimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track
CVE-2026-1111286.8 MediumAssimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment
CVE-2026-1111276.9 Mediumcatdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string
CVE-2026-1111266.9 Mediumcatdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler
CVE-2026-1111256.9 MediumCFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble
CVE-2026-1111246.9 MediumCFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed
CVE-2026-1111236.9 MediumFluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination
CVE-2026-1108785.1 MediumAureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information
CVE-2026-1108776.8 MediumAdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load
CVE-2026-1108766.8 MediumAdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files
CVE-2026-1108756.9 MediumAdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp
CVE-2026-1108747.5 HighDolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()
CVE-2026-1112526.5 MediumOpenNMS denial of service via XML entity expansion
CVE-2026-870295.9 Mediumundici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
CVE-2026-1112348.2 HighSimplePie through 1.9.0 Local File Read via file:// Redirect

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.