CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109263 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release a... |
| CVE-2026-109262 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fail... |
| CVE-2026-109261 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory ... |
| CVE-2026-109260 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release a... |
| CVE-2026-109259 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that... |
| CVE-2026-109258 | HIGH | 7.5 | 0.1% | Oct 12, 2026 | ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when ... |
| CVE-2026-109257 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane... |
| CVE-2026-109256 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the ... |
| CVE-2026-109255 | MEDIUM | 6.8 | 0.5% | Oct 12, 2026 | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a ma... |
| CVE-2026-109254 | MEDIUM | 5.9 | 0.2% | Oct 12, 2026 | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which ... |
| CVE-2026-109253 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which ch... |
| CVE-2026-109252 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows ... |
| CVE-2026-109251 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface... |
| CVE-2026-109250 | MEDIUM | 6.6 | 0.2% | Oct 12, 2026 | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers ... |
| CVE-2026-109249 | MEDIUM | 5.5 | 0.1% | Oct 12, 2026 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it ... |
| CVE-2026-109248 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_t... |
| CVE-2026-109247 | LOW | 3.1 | 0.3% | Oct 12, 2026 | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinp... |
| CVE-2026-109246 | MEDIUM | 6.5 | 0.4% | Oct 12, 2026 | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a... |
| CVE-2026-109245 | MEDIUM | 6.8 | 0.2% | Oct 12, 2026 | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfr... |
| CVE-2026-109244 | MEDIUM | 6.6 | 0.1% | Oct 12, 2026 | FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypte... |
| CVE-2026-109243 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to re... |
| CVE-2026-109242 | HIGH | 7.1 | 0.3% | Oct 12, 2026 | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because... |
| CVE-2026-109241 | LOW | 3.1 | 0.2% | Oct 12, 2026 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that all... |
| CVE-2026-109240 | LOW | 3.1 | 0.3% | Oct 12, 2026 | FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RD... |
| CVE-2026-109239 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets una... |