ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop

CVE-2026-53461

An incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition

CVE-2026-53460

A missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. ## Credit

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Policy Bypass can read disallowed files via symlink

CVE-2026-49219

An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

CVE-2026-49218

A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in othe

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems

CVE-2026-48994

A missing check of a return value could lead to a heap buffer over-write in the MAT decoder on 32-bit systems.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

CVE-2026-48734

A crafted MVG file could result in a stack overflow due to a missing depth or visited-set check.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick has an Infinite Loop in subimage-search with crafted image

CVE-2026-48733

An infinite loop in the subimage-search operation can happen when using a crafted image.

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

CVE-2026-48724

When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write.

历史摘要 · 未重新核验 · GitHub Advisory

MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments

CVE-2026-48517

## Summary MessagePack-CSharp's typeless deserialization includes `MessagePackSerializerOptions.ThrowIfDeserializingTyp

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability

CVE-2026-45591

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.

历史摘要 · 未重新核验 · GitHub Advisory

MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input

CVE-2026-48109

### Impact A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes `Lz4Bloc

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

CVE-2026-47761

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*`

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

CVE-2026-47762

### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and injec

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

CVE-2026-47759

### Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style).

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

CVE-2026-47760

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.

历史摘要 · 未重新核验 · GitHub Advisory

Nerdbank.MessagePack has Inefficient CPU Computation

### Impact Applications that call `OptionalConverters.WithExpandoObjectConverter` and deserialize untrusted data are op

历史摘要 · 未重新核验 · GitHub Advisory

Nerdbank.MessagePack has a memory amplification DoS in collection deserialization

Nerdbank.MessagePack deserializers for many collection-shaped types trusted the element count declared in MessagePack ar

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Heap Buffer Over-Read in distributed pixel cache server

CVE-2026-47166

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server proces

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

CVE-2026-47165

The distributed pixel cache was originally designed to operate without a challenge–response authentication model. Howeve

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

CVE-2026-46693

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process whe

历史摘要 · 未重新核验 · GitHub Advisory