최근 6개월의 모든 CVE를 매일 업데이트합니다.

13개 중 13개 표시

• 중간CVE-2026-54604CVSS 점수 5.32026. 9. 17.

  OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to request a full-height destination for a partia

  CWE-758CWE-908
• 치명CVE-2026-16441CVSS 점수 9.62026. 7. 21.

  In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

  CWE-758eclipse openj9
• 낮음CVE-2026-50185CVSS 점수 3.32026. 7. 17.

  RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/ba

  CWE-758rustcrypto cmov
• 낮음CVE-2024-58350CVSS 점수 2.92026. 6. 10.

  Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial o

  CWE-758nsa ghidra
• 낮음CVE-2026-40279CVSS 점수 3.72026. 4. 21.

  BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decode_signed32() in src/bacnet/bacint.c reconstructs a 32-bit signed integer from four APDU bytes using signed left shifts. When any of the four bytes has bit

  CWE-758bacnetstack bacnet_stack
• 중간CVE-2026-34549CVSS 점수 6.22026. 3. 31.

  iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issu

  CWE-758color iccdev
• 중간CVE-2026-34547CVSS 점수 6.22026. 3. 31.

  iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in IccUtil.cpp can be triggered by a crafted ICC profile when running iccDumpProfile. This issue has bee

  CWE-758color iccdev
• 중간CVE-2026-34537CVSS 점수 6.22026. 3. 31.

  iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) in CIccOpDefEnvVar::Exec() due to invalid enum values being loaded for icSigCmmEnvV

  CWE-758color iccdev
• 중간CVE-2026-34533CVSS 점수 6.22026. 3. 31.

  iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior (UB) in CIccCalculatorFunc::ApplySequence() due to invalid enum values being loaded for

  CWE-758color iccdev
• 중간CVE-2026-28528CVSS 점수 4.62026. 3. 30.

  BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connect

  CWE-125CWE-758bluekitchen-gmbh btstack
• 치명CVE-2026-4724CVSS 점수 9.12026. 3. 24.

  Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

  CWE-758mozilla firefoxmozilla thunderbird
• 높음CVE-2026-4718CVSS 점수 8.12026. 3. 24.

  Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  CWE-758mozilla firefoxmozilla thunderbird
• 치명CVE-2026-4705CVSS 점수 9.82026. 3. 24.

  Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  CWE-758mozilla firefox