Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 7 of 1013.
- OSV-2026-970 Use-of-uninitialized-value in ogs_cpystrn
- OSV-2026-97 Heap-buffer-overflow in vpx_wb_write_literal
- OSV-2026-969 Heap-use-after-free in Ogre::VertexData::convertPackedColour
- OSV-2026-963 Bad-cast to Ogre::HardwareBuffer from invalid vptr
- OSV-2026-962 Use-of-uninitialized-value in iup_delta_optimize
- OSV-2026-959 Heap-use-after-free in Wt::Http::Request::parseFormUrlEncoded
- OSV-2026-958 Use-of-uninitialized-value in LibRaw::fbdd
- OSV-2026-933 UNKNOWN READ in aiMesh::~aiMesh
- OSV-2026-928 Stack-use-after-scope in StreamReader_CApi::wait_for_file_size
- OSV-2026-925 Heap-buffer-overflow in ssh_config_parse_line_internal
- OSV-2026-923 Heap-use-after-free in gf_node_unregister
- OSV-2026-917 Heap-buffer-overflow in ixheaace_process
- OSV-2026-910 Heap-use-after-free in gf_node_unregister
- OSV-2026-91 Use-after-poison in compress.cc
- OSV-2026-907 Heap-use-after-free in gf_sg_route_del
- OSV-2026-903 UNKNOWN in avi_parse_input_file
- OSV-2026-895 Heap-buffer-overflow in ihevcd_fmt_conv
- OSV-2026-892 Heap-buffer-overflow in decode_R13_RNUMBER
- OSV-2026-889 Use-of-uninitialized-value in vp8_compute_skin_block
- OSV-2026-886 Heap-buffer-overflow in ihevcd_fmt_conv
- OSV-2026-882 Null-dereference READ in cram_decoder_init
- OSV-2026-880 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
- OSV-2026-879 Heap-use-after-free in lsr_restore_base
- OSV-2026-872 Use-of-uninitialized-value in vpx_variance16x16_avx2
- OSV-2026-87 Security exception in org.apache.poi.util.IOUtils.safelyAllocate
- OSV-2026-868 Use-of-uninitialized-value in vp8_regular_quantize_b_sse4_1
- OSV-2026-867 Bad-cast to std::__shared_weak_count from invalid vptr
- OSV-2026-863 Global-buffer-overflow in cram_decoder_init
- OSV-2026-860 UNKNOWN READ in write_publickey
- OSV-2026-86 Security exception in java.base/java.util.Arrays.copyOfRange
- OSV-2026-855 Heap-use-after-free in gf_sg_reset
- OSV-2026-853 Stack-buffer-overflow in log4cxx::helpers::Transcoder::decode
- OSV-2026-850 Heap-buffer-overflow in opus_repacketizer_out_range_impl
- OSV-2026-846 Bad-cast to AMFColor from AMFMetadata
- OSV-2026-837 Heap-use-after-free in grk::TileProcessor::parseTilePart
- OSV-2026-828 Use-of-uninitialized-value in ReadContainer
- OSV-2026-824 Stack-buffer-overflow in coolkey_rsa_op
- OSV-2026-823 Heap-buffer-overflow in ihevcd_fmt_conv_422sp_to_420p
- OSV-2026-822 Heap-use-after-free in slice_segment_header::operator=
- OSV-2026-816 Heap-buffer-overflow in md_process_all_blocks
- OSV-2026-815 Heap-buffer-overflow in ihevcd_sao_shift_ctb
- OSV-2026-812 Heap-buffer-overflow in ihevcd_fmt_conv_422sp_to_420p
- OSV-2026-808 Heap-buffer-overflow in ihevcd_fmt_conv
- OSV-2026-806 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
- OSV-2026-805 Heap-buffer-overflow in ihevcd_fmt_conv
- OSV-2026-803 Container-overflow in OpenBabel::MDLFormat::ReadV3000Block
- OSV-2026-798 Heap-use-after-free in ReplaceDEFNode
- OSV-2026-796 UNKNOWN READ in processXDR
- OSV-2026-795 Stack-buffer-underflow in probe_dasd_pt
- OSV-2026-791 Segv on unknown address in ___interceptor_strtol
- OSV-2026-788 UNKNOWN READ in Mat_VarGetStructsLinear
- OSV-2026-785 Heap-double-free in _dwarf_load_elf_symtab_symbols
- OSV-2026-777 Heap-buffer-overflow in md_is_link_title
- OSV-2026-767 Heap-use-after-free in gf_sg_reset
- OSV-2026-765 Heap-use-after-free in gf_node_get_id
- OSV-2026-764 Heap-use-after-free in JS_DefineProperty
- OSV-2026-762 Heap-buffer-overflow in coap_pdu_parse_header
- OSV-2026-760 Heap-buffer-overflow in md_decode_utf8__
- OSV-2026-76 Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement
- OSV-2026-759 UNKNOWN READ in bfd_getb32
- OSV-2026-752 Heap-buffer-overflow in Mat_VarGetStructsLinear
- OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props
- OSV-2026-748 Heap-buffer-overflow in p11_lexer_next
- OSV-2026-747 Heap-buffer-overflow in coap_persist_startup_lkd
- OSV-2026-744 Heap-double-free in _dwarf_destruct_elf_nlaccess
- OSV-2026-743 UNKNOWN READ in persist_target.c
- OSV-2026-741 Heap-buffer-overflow in p11_lexer_next
- OSV-2026-74 Heap-buffer-overflow in ___interceptor_strtol
- OSV-2026-736 Heap-buffer-overflow in coap_pdu_parse_header
- OSV-2026-733 Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg
- OSV-2026-728 Stack-buffer-overflow in autoload_external_files
- OSV-2026-727 Global-buffer-overflow in md_start_new_block
- OSV-2026-726 Use-after-poison in md_build_attribute
- OSV-2026-721 Heap-buffer-overflow in H5D__scatter_mem
- OSV-2026-720 Heap-buffer-overflow in coap_persist_startup_lkd
- OSV-2026-718 Heap-buffer-overflow in md_parse
- OSV-2026-717 Stack-use-after-scope in enter_block_callback
- OSV-2026-716 Heap-buffer-overflow in H5VM_memcpyvv
- OSV-2026-713 Use-of-uninitialized-value in ojph::local::tile::pull
- OSV-2026-712 Heap-buffer-overflow in Mat_VarGetCellsLinear
- OSV-2026-711 Use-of-uninitialized-value in jxl::PerformMulBlending
- OSV-2026-710 UNKNOWN WRITE in ojph::local::precinct::parse
- OSV-2026-707 Global-buffer-overflow in txt2sd
- OSV-2026-703 Heap-use-after-free in js_atomics_op
- OSV-2026-699 Use-of-uninitialized-value in Mat_VarGetSize
- OSV-2026-696 Use-of-uninitialized-value in JXRHandler::read
- OSV-2026-678 UNKNOWN WRITE in ___interceptor_strncpy
- OSV-2026-666 Heap-use-after-free in insertkey
- OSV-2026-664 Heap-buffer-overflow in DwaCompressor_uncompress
- OSV-2026-659 Heap-buffer-overflow in ___interceptor_strncpy
- OSV-2026-655 Heap-buffer-overflow in lj_record_idx
- OSV-2026-653 Heap-buffer-overflow in generic_unpack
- OSV-2026-651 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
- OSV-2026-650 Use-of-uninitialized-value in Mat_int32Swap
- OSV-2026-649 Container-overflow in OGRGeometryFactory::organizePolygons
- OSV-2026-646 Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimized
- OSV-2026-634 Index-out-of-bounds in sas7bdat_submit_columns_if_needed
- OSV-2026-632 Use-of-uninitialized-value in PKFormatConverter_InitializeConvert
- OSV-2026-630 Use-of-uninitialized-value in JXRHandlerPrivate::readTextMeta
- OSV-2026-629 Security exception in org.apache.thrift.protocol.TProtocolUtil.skip