Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 8 of 1013.
- OSV-2026-623 Use-of-uninitialized-value in Mat_PrintNumber
- OSV-2026-621 Use-of-uninitialized-value in vcardtime_from_string
- OSV-2026-620 Heap-buffer-overflow in ixheaace_process
- OSV-2026-616 Use-of-uninitialized-value in JXRHandlerPrivate::colorSpace
- OSV-2026-611 Heap-buffer-overflow in ParseOpaqueMetadata
- OSV-2026-610 Memcpy-param-overlap in htx_replace_blk_value
- OSV-2026-609 Security exception in com.github.javaparser.ast.NodeList.forEach
- OSV-2026-608 Stack-buffer-overflow in is_http
- OSV-2026-605 Heap-buffer-overflow in DwaCompressor_uncompress
- OSV-2026-603 UNKNOWN READ in <wasmtime::runtime::func::Func>::call_unchecked_raw::<
- OSV-2026-600 Heap-buffer-overflow in skcms_private::baseline::clut
- OSV-2026-599 UNKNOWN READ in XRef::parseEntry
- OSV-2026-595 UNKNOWN WRITE in std::__1::istreambuf_iterator<char, std::__1::char_traits<char>> std::__1::num_g
- OSV-2026-589 Heap-double-free in coap_new_oscore_conf
- OSV-2026-582 Use-of-uninitialized-value in H5S_select_hyperslab
- OSV-2026-579 Heap-buffer-overflow in CEA708_DTVCC_Demuxer_Push
- OSV-2026-57 Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit
- OSV-2026-568 Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut
- OSV-2026-565 Heap-buffer-overflow in xmlFAParsePosCharGroup
- OSV-2026-564 Use-of-uninitialized-value in DoTestOneInput
- OSV-2026-563 UNKNOWN READ in bfd_getl32
- OSV-2026-561 Global-buffer-overflow in nameMatch
- OSV-2026-551 UNKNOWN WRITE in ___interceptor_free
- OSV-2026-55 Use-of-uninitialized-value in vp9_quantize_fp_avx2
- OSV-2026-548 UNKNOWN in ojph::local::precinct::parse
- OSV-2026-54 Heap-use-after-free in _dwarf_exec_frame_instr
- OSV-2026-539 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone
- OSV-2026-535 Security exception in org.htmlunit.cyberneko.HTMLTagBalancer.endElement
- OSV-2026-534 Heap-buffer-overflow in cram_encode_container
- OSV-2026-532 Heap-buffer-overflow in regsub
- OSV-2026-53 Heap-use-after-free in graph::LigatureSubstFormat1::shrink
- OSV-2026-521 UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long>
- OSV-2026-518 Use-of-uninitialized-value in ne_read_block
- OSV-2026-514 Heap-buffer-overflow in format_expand1
- OSV-2026-512 Heap-buffer-overflow in g_utf8_get_char
- OSV-2026-505 UNKNOWN READ in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>
- OSV-2026-504 Heap-use-after-free in ObjectStream::getObject
- OSV-2026-49 Heap-buffer-overflow in check_sync_pes
- OSV-2026-484 Heap-buffer-overflow in DecodeBlock
- OSV-2026-481 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII
- OSV-2026-461 UNKNOWN READ in XRef::constructObjectEntry
- OSV-2026-455 UNKNOWN READ in mkv::matroska_segment_c::TrackInit
- OSV-2026-449 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry
- OSV-2026-44 UNKNOWN READ in MP4_TrackSeek
- OSV-2026-437 Heap-use-after-free in tf::Executor::_invoke
- OSV-2026-431 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName
- OSV-2026-417 Segv on unknown address in arrow::Array::IsNull
- OSV-2026-392 UNKNOWN READ in pcpp::BgpLayer::getHeaderLen
- OSV-2026-387 Security exception in org.apache.poi.ss.formula.FormulaParser.parseSheetRange
- OSV-2026-386 Use-of-uninitialized-value in pcpp::byteArrayToHexString
- OSV-2026-374 Security exception in org.apache.poi.ss.formula.FormulaParser.additiveExpression
- OSV-2026-371 Heap-buffer-overflow in tinyobj::tryParseDouble
- OSV-2026-36 Heap-buffer-overflow in iTUNTripletCallback
- OSV-2026-359 Segv on unknown address in gpsd_vlog
- OSV-2026-357 Heap-buffer-overflow in _cupsRasterAddError
- OSV-2026-354 Use-of-uninitialized-value in pcpp::MplsLayer::toString
- OSV-2026-350 UNKNOWN READ in bfd_getl32
- OSV-2026-344 UNKNOWN READ in void Assimp::Blender::ConvertDispatcher<float>
- OSV-2026-343 Heap-buffer-overflow in pcre2_compile_32
- OSV-2026-341 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
- OSV-2026-338 Use-of-uninitialized-value in pjsip_auth_clt_init_req
- OSV-2026-324 Security exception in java.base/java.util.Arrays.copyOfRange
- OSV-2026-311 UNKNOWN READ in strncasecmp
- OSV-2026-308 Heap-buffer-overflow in vcardstructured_new_from_string
- OSV-2026-307 Global-buffer-overflow in navcom_parse
- OSV-2026-304 Heap-use-after-free in tf::Executor::_invoke
- OSV-2026-302 Use-of-uninitialized-value in BIO_new_file
- OSV-2026-301 Use-of-uninitialized-value in pcpp::IPv6Extension::getExtensionLen
- OSV-2026-300 UNKNOWN WRITE in nmeaid_to_prn
- OSV-2026-30 Use-of-uninitialized-value in vp9_quantize_fp_avx2
- OSV-2026-297 Security exception in org.apache.poi.util.IOUtils.safelyAllocate
- OSV-2026-292 UNKNOWN WRITE in <wasmtime::runtime::func::Func>::call_unchecked_raw::<
- OSV-2026-272 Heap-use-after-free in vcardproperty_get_value
- OSV-2026-261 Segv on unknown address in ___interceptor_strtol
- OSV-2026-259 Use-of-uninitialized-value in tsip_parse_input
- OSV-2026-255 UNKNOWN WRITE in nmeaid_to_prn
- OSV-2026-246 Use-of-uninitialized-value in printAddressingMode
- OSV-2026-244 Use-of-uninitialized-value in ihevcd_fmt_conv
- OSV-2026-242 Use-of-uninitialized-value in ntrip_parse_url
- OSV-2026-240 Use-of-uninitialized-value in packet_get1
- OSV-2026-229 Segv on unknown address in aiAnimation::~aiAnimation
- OSV-2026-226 UNKNOWN WRITE in decode_xa2_00
- OSV-2026-216 Heap-buffer-overflow in mg_mqtt_next_prop
- OSV-2026-215 UNKNOWN READ in getTypeCacheHashTableBucket
- OSV-2026-212 UNKNOWN READ in gpsd_poll
- OSV-2026-21 Use-of-uninitialized-value in processTLSBlock
- OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url
- OSV-2026-205 UNKNOWN READ in gpsd_poll
- OSV-2026-204 Segv on unknown address in icalarray_append
- OSV-2026-203 Segv on unknown address in glslang::TIntermediate::addSymbol
- OSV-2026-200 Global-buffer-overflow in nameMatch
- OSV-2026-2 Heap-buffer-overflow in cmt_mpack_consume_uint_tag
- OSV-2026-196 Null-dereference READ in ubsan_GetStackTrace
- OSV-2026-195 Use-of-uninitialized-value in vcardstructured_free
- OSV-2026-189 Global-buffer-overflow in gpsd_poll
- OSV-2026-182 Use-of-uninitialized-value in json_internal_read_object
- OSV-2026-177 Security exception in org.apache.poi.util.IOUtils.safelyAllocate
- OSV-2026-170 Use-of-uninitialized-value in pcpp::PcapNgFileReaderDevice::getNextPacketInternal
- OSV-2026-169 Null-dereference READ in execute_post_instantiate_functions
- OSV-2026-167 Use-of-uninitialized-value in aivdm_analyze