NVD CVEs — 本日公開 (385 件)
CVE-2026-62343 4.7 MEDIUM
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issue h
CVE-2026-62363 5.0 MEDIUM
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
CVE-2026-62946 5.1 MEDIUM
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in
CVE-2026-64685 5.3 MEDIUM
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location so a crafted image could result in an heap buffer over-read. This issue has been fixed in version 7.1.2-27
CVE-2026-17650
Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17651
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17652
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17653
Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17654
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Critical)
CVE-2026-17655
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
GitHub Security Advisories — 本日公開 (20 件)
GHSA-479r-w7g7-fj9j
HIGH
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in...
GHSA-mjmr-35x5-p5hh
MEDIUM
The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via ...
GHSA-6hj6-9cvx-mc3c
HIGH
A format string vulnerability was found in the Notification OAuth settings of ADM. The...
GHSA-ffj5-xf9v-mmp9
UNKNOWN
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...
GHSA-v869-q27w-qhm7
HIGH
A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs...
GHSA-g2xh-vghf-6g4h
HIGH
Improper neutralization of special elements used in an SQL command ('SQL injection')...
GHSA-434r-58rq-9884
UNKNOWN
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
GHSA-8fm4-jx6q-6gmh
UNKNOWN
Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote...
GHSA-5hfx-gvvr-p6xh
HIGH
A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability...
GHSA-569f-g5j2-m5r8
UNKNOWN
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...