CVE Vulnerability Database
Search and browse 423,888 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111146 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows attackers to read past h... |
| CVE-2026-111145 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never valida... |
| CVE-2026-111144 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attacke... |
| CVE-2026-111143 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c... |
| CVE-2026-111142 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-rea... |
| CVE-2026-111141 | MEDIUM | 4.7 | — | Oct 15, 2026 | zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that... |
| CVE-2026-111140 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds va... |
| CVE-2026-111139 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers t... |
| CVE-2026-111138 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() b... |
| CVE-2026-111137 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attack... |
| CVE-2026-111136 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf... |
| CVE-2026-111135 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that ... |
| CVE-2026-111134 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() t... |
| CVE-2026-111133 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attacker... |
| CVE-2026-111132 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to... |
| CVE-2026-111131 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack... |
| CVE-2026-111130 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to re... |
| CVE-2026-111129 | MEDIUM | 5.5 | 0.1% | Oct 15, 2026 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary ... |
| CVE-2026-111128 | MEDIUM | 5.5 | 0.2% | Oct 15, 2026 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to c... |
| CVE-2026-111127 | MEDIUM | 6.1 | 0.1% | Oct 15, 2026 | catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows ... |
| CVE-2026-111126 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xl... |
| CVE-2026-111125 | HIGH | 7.1 | 0.1% | Oct 15, 2026 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows a... |
| CVE-2026-111124 | HIGH | 7.1 | 0.2% | Oct 15, 2026 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that... |
| CVE-2026-111123 | MEDIUM | 6.1 | — | Oct 15, 2026 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack m... |
| CVE-2026-110878 | MEDIUM | 5.4 | 0.2% | Oct 15, 2026 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject ... |