Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (865 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-105081 1 Imagemagick 1 Imagemagick 2026-10-12 3.6 Low
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.
CVE-2026-108693 1 Imagemagick 1 Imagemagick 2026-10-11 7 High
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.
CVE-2026-107210 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions and consuming excessive disk space. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.
CVE-2026-106578 1 Imagemagick 1 Imagemagick 2026-10-10 5.9 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-106573 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-106568 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.
CVE-2026-105827 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105826 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105825 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105824 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105823 1 Imagemagick 1 Imagemagick 2026-10-09 4.0 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105405 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105404 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105403 1 Imagemagick 1 Imagemagick 2026-10-09 6.2 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105402 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105401 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105400 1 Imagemagick 1 Imagemagick 2026-10-09 3.3 Low
This CVE ID has been rejected as a duplicate.
CVE-2026-105399 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105398 1 Imagemagick 1 Imagemagick 2026-10-09 5.1 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-107208 1 Imagemagick 1 Imagemagick 2026-10-07 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.