CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- imagemagickImagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer6.5 Medium
- imagemagickImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write6.5 Medium
- imagemagickImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash5.3 Medium
- imagemagickImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image5.3 Medium
- datalinkdc dinkyDataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal5.3 Medium
- horillahorilla-opensource horilla Leads global.js cross site scripting5.1 Medium
- imagemagickImageMagick vulnerable to Code injection via PostScript header in ps coders5.7 Medium
- imagemagickImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths5.3 Medium
- imagemagickImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions8.2 High
- imagemagickImageMagick has memory leak in msl encoder5.3 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Possible memory leak in ASHLAR encoder5.3 Medium
- withastro astro, astro \@astrojs\/node +1 moreAstro has memory exhaustion DoS due to missing request body size limit in Server Actions5.9 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Out of bounds read in multiple coders read raw pixel data5.1 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Infinite loop vulnerability when parsing a PCD file7.5 High
- horillahorilla-opensource horilla Query Parameter global_search.py get redirect5.3 Medium
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection6.9 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Converting multi-layer nested MVG to SVG can cause DoS5.3 Medium
- imagemagickImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression7.5 High
- lfprojects valkey-bloomRemote DoS from malformed RESTORE command6.5 Medium
- free5gc udrfree5GC has improper error handling in NEF with information exposure6.6 Medium
- free5gc udmfree5GC has Improper Input Validation in UDM UEAU Service6.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE 6.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE 6.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing6.6 Medium
- opentext™ carbonite safe server backupRCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.8.6 High
apache-poiOSS-FuzzSecurity exception in org.apache.poi.util.IOUtils.safelyAllocateNo score- free5gc udrfree5GC vulnerable to improper error handling in NEF with information exposure6.6 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 1489.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 1489.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cache component9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: JAR component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: ImageLib component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Window and Location component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component7.5 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor component9.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Libraries component in NSS9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Networking: JAR component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component in External Software10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Web Audio component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback component9.8 Critical
- Show moreLoading…