XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third…

pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Information disclosure due to incorrect boundary conditions in the Audio/Video component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()

ImageMagick has a Heap Buffer Overflow via MVG decoder

Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Gstreamer: incomplete fix of cve-2026-1940

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libsoup: libsoup: denial of service via use-after-free in http/2 server

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

ImageMagick has an uninitialized pointer dereference in JBIG decoder

Memory allocation with excessive without limits in the internal SVG decoder

ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

The issue was addressed with improved memory handling

FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Libxml: null pointer dereference leads to denial of service (dos)

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2