Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (891 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-109268 1 Imagemagick 1 Imagemagick 2026-10-13 3.7 Low
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.
CVE-2026-109263 1 Imagemagick 1 Imagemagick 2026-10-13 3.7 Low
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.
CVE-2026-109258 1 Imagemagick 1 Imagemagick 2026-10-13 2.5 Low
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.
CVE-2026-108693 1 Imagemagick 1 Imagemagick 2026-10-11 7 High
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.
CVE-2026-106568 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.
CVE-2026-105827 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105826 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105825 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105824 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105823 1 Imagemagick 1 Imagemagick 2026-10-09 4.0 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105405 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105404 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105403 1 Imagemagick 1 Imagemagick 2026-10-09 6.2 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105402 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105401 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105400 1 Imagemagick 1 Imagemagick 2026-10-09 3.3 Low
This CVE ID has been rejected as a duplicate.
CVE-2026-105399 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105398 1 Imagemagick 1 Imagemagick 2026-10-09 5.1 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-106566 1 Imagemagick 1 Imagemagick 2026-10-07 4 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in version 7.1.2-32.
CVE-2026-106565 1 Imagemagick 1 Imagemagick 2026-10-07 5.9 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.