Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.120 | 6,0 % |
| <10 % | 343.681 | 93,0 % |
CVE-2016-1181 | Oracle Retail Clearance Optimization Engine 14.0.5 Dataset memory corruption (ID 87288 / BID-91068)
A vulnerability, which was classified as critical, was found in Oracle Retail Clearance Optimization Engine 14.0.5. This affects an unknown function of the component Dataset Component. Executing a manipulation can lead to memory corruption.
CVE-2026-101955 | Juniper Junos OS up to 26.2R1-S1 UTM Anti-Spam SBL stack-based overflow (WID-SEC-2026-3976)
A vulnerability classified as very critical has been found in Juniper Junos OS up to 26.2R1-S1. Affected by this issue is some unknown functionality of the component UTM Anti-Spam SBL. Performing a manipulation results in stack-based buffer
CVE-2026-101954 | Juniper Networks Junos OS/Junos OS Evolved J-Web improper authentication (WID-SEC-2026-3976)
A vulnerability has been found in Juniper Networks Junos OS and Junos OS Evolved and classified as very critical. Affected by this vulnerability is an unknown functionality of the component J-Web. Performing a manipulation results in improp
CVE-2026-101952 | Juniper Networks Junos OS/Junos OS Evolved rpd input validation (WID-SEC-2026-3976)
A vulnerability was found in Juniper Networks Junos OS and Junos OS Evolved. It has been rated as critical. This issue affects some unknown processing of the component rpd. This manipulation causes improper input validation. The identificat
CVE-2026-101951 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon input validation (WID-SEC-2026-3976)
A vulnerability classified as problematic has been found in Juniper Networks Junos OS and Junos OS Evolved. Affected is an unknown function of the component Routing Protocol Daemon. Performing a manipulation results in improper input valida
PwnEscape: Kritische Linux-Kernel-Lücke erlaubt VM-Guests Host-Speicherlese
LONDON (IT BOLTWISE) – Eine neu offengelegte kritische Schwachstelle im Linux-Kernel mit der Kennung CVE-2026-99999 erlaubt Code innerhalb eines VM-Guests das Auslesen von Host-Speicher. Die Lücke steckt im Netzwerkcode des Kernels und dami
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...] Weiterlesen
CVE-2026-101105 | code-projects Matrimonial System 1.0 Profile Creation Endpoint /create_profile processprofile_form fname sql injection
A vulnerability was found in code-projects Matrimonial System 1.0. It has been rated as critical. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipula
CVE-2016-0763 | Apache Tomcat 7.0/8.0/9.0 ResourceLinkFactory.setGlobalContext access control (RHSA-2016:1087 / Nessus ID 88936)
A vulnerability was found in Apache Tomcat 7.0/8.0/9.0. It has been rated as critical. Affected by this vulnerability is the function ResourceLinkFactory.setGlobalContext. Performing a manipulation results in improper access controls. This
CVE-2016-0714 | Oracle Communications 12.x Policy Management access control (Nessus ID 90274 / ID 350024)
A vulnerability categorized as critical has been discovered in Oracle Communications 12.x. This impacts an unknown function of the component Policy Management. Executing a manipulation can lead to improper access controls. This vulnerabilit
CVE-2016-0706 | Apache Tomcat 6.0/7.0/8.0/9.0 StatusManagerServlet information disclosure (RHSA-2016:1087 / Nessus ID 88935)
A vulnerability was found in Apache Tomcat 6.0/7.0/8.0/9.0 and classified as problematic. This affects an unknown function of the component StatusManagerServlet. The manipulation results in information disclosure. This vulnerability was nam
CVE-2016-0494 | Oracle Java SE 6u105/7u91/8u66 2D memory corruption (Nessus ID 88060 / ID 350055)
A vulnerability, which was classified as very critical, has been found in Oracle Java SE 6u105/7u91/8u66. Affected by this issue is some unknown functionality of the component 2D. The manipulation leads to memory corruption. This vulnerabil
CVE-2016-0483 | Oracle Java SE 6u105/7u91/8u66 AWT memory corruption (Nessus ID 88060 / ID 350048)
A vulnerability has been found in Oracle Java SE 6u105/7u91/8u66 and classified as very critical. This vulnerability affects unknown code of the component AWT. This manipulation causes memory corruption. This vulnerability is registered as
CVE-2016-0475 | Oracle Java SE 8u66 Libraries memory corruption (Nessus ID 88060 / ID 350055)
A vulnerability was found in Oracle Java SE 8u66 and classified as critical. This issue affects some unknown processing of the component Libraries. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2016-0
CVE-2016-0466 | Oracle Java SE 6u105/7u91/8u66 JAXP denial of service (Nessus ID 88060 / ID 350055)
A vulnerability was found in Oracle Java SE 6u105/7u91/8u66. It has been declared as problematic. The affected element is an unknown function of the component JAXP. Executing a manipulation can lead to denial of service. This vulnerability
CVE-2016-0448 | Oracle Java SE 6u105/7u91/8u66 JMX information disclosure (Nessus ID 88060 / ID 350055)
A vulnerability was found in Oracle Java SE 6u105/7u91/8u66. It has been rated as problematic. The impacted element is an unknown function of the component JMX. The manipulation leads to information disclosure. This vulnerability is traded
CVE-2016-0402 | Oracle Java SE 6u105/7u91/8u66 Networking memory corruption (Nessus ID 88060 / ID 350055)
A vulnerability was found in Oracle Java SE 6u105/7u91/8u66. It has been classified as problematic. Impacted is an unknown function of the component Networking. Performing a manipulation results in memory corruption. This vulnerability is r
CVE-2016-0055 | Microsoft Office up to 2016 memory corruption (MS16-015 / Nessus ID 88647)
A vulnerability was found in Microsoft Office 2007 SP3/2010 SP2/2013 RT SP1/2013 SP1/2016. It has been declared as critical. This impacts an unknown function. Such manipulation leads to memory corruption. This vulnerability is referenced as
CVE-2016-0035 | Microsoft Excel up to 2016 Office Document memory corruption (MS16-004 / Nessus ID 87882)
A vulnerability labeled as critical has been found in Microsoft Excel up to 2016. The impacted element is an unknown function of the component Office Document Handler. Executing a manipulation can lead to memory corruption. This vulnerabili
CVE-2016-0012 | Microsoft Office up to 2016 ASLR information disclosure (MS16-004 / Nessus ID 87882)
A vulnerability marked as critical has been reported in Microsoft Office up to 2016. Impacted is an unknown function of the component ASLR. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2
CVE-2016-0011 | Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting (MS16-004 / Nessus ID 87882)
A vulnerability labeled as problematic has been found in Microsoft SharePoint Foundation 2013 SP1. This issue affects some unknown processing of the component Access Control Policy. Such manipulation leads to cross site scripting. This vuln
CVE-2016-0010 | Microsoft Office up to 2016 Office Document memory corruption (MS16-004 / Nessus ID 87882)
A vulnerability identified as critical has been detected in Microsoft Office up to 2016. This vulnerability affects unknown code of the component Office Document Handler. This manipulation causes memory corruption. This vulnerability is reg
CVE-2026-101950 | Juniper Networks Junos OS up to 26.2R1-S1 SVR heap-based overflow (WID-SEC-2026-3976)
A vulnerability was found in Juniper Networks Junos OS up to 26.2R1-S1. It has been classified as very critical. The impacted element is an unknown function of the component SVR. Performing a manipulation results in heap-based buffer overfl
CVE-2026-101949 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon null pointer dereference (WID-SEC-2026-3976)
A vulnerability was found in Juniper Networks Junos OS and Junos OS Evolved and classified as critical. This affects an unknown function of the component Routing Protocol Daemon. The manipulation results in null pointer dereference. This vu
CVE-2026-101948 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon null pointer dereference (WID-SEC-2026-3976)
A vulnerability, which was classified as critical, has been found in Juniper Networks Junos OS and Junos OS Evolved. This impacts an unknown function of the component Routing Protocol Daemon. Performing a manipulation results in null pointe
CVE-2026-101946 | Juniper Networks Junos OS/Junos OS Evolved rpd process out-of-bounds (WID-SEC-2026-3976)
A vulnerability, which was classified as problematic, has been found in Juniper Networks Junos OS and Junos OS Evolved. Impacted is an unknown function of the component rpd process. Performing a manipulation results in out-of-bounds read. T
CVE-2026-101945 | Juniper Networks Junos OS/Junos OS Evolved rpd process integer overflow (WID-SEC-2026-3976)
A vulnerability identified as critical has been detected in Juniper Networks Junos OS and Junos OS Evolved. This affects an unknown part of the component rpd process. The manipulation leads to integer overflow. This vulnerability is documen
CVE-2026-101944 | Juniper Junos OS/Junos OS Evolved RPD integer overflow (WID-SEC-2026-3976)
A vulnerability classified as critical has been found in Juniper Junos OS and Junos OS Evolved. Affected by this issue is some unknown functionality of the component RPD. This manipulation causes integer overflow. This vulnerability appears
CVE-2026-101943 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon input validation (WID-SEC-2026-3976)
A vulnerability marked as critical has been reported in Juniper Networks Junos OS and Junos OS Evolved. Affected is an unknown function of the component Routing Protocol Daemon. The manipulation leads to improper input validation. This vuln
Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads
Made with AI: the scanner and this post were made with AI agents working for me, MV2 of Munim, Inc. An .onnx file looks like a safe thing to download. It is a protobuf message with no code of its own: no pickle, no Lambda layer, nothing tha
CVE-2022-46639 | Correos Prestashop 1.7.x descarga_etiqueta.php path traversal (EUVD-2022-49443)
A vulnerability labeled as critical has been found in Correos Prestashop 1.7.x. This affects an unknown function of the file descarga_etiqueta.php. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2022-46639. A
CVE-2022-46637 | Prolink PRS1841 Telnet/FTP hard-coded credentials (ID 170342 / EUVD-2022-49441)
A vulnerability classified as critical was found in Prolink PRS1841. Affected by this vulnerability is an unknown functionality of the component Telnet/FTP. Such manipulation leads to hard-coded credentials. This vulnerability is documented
CVE-2022-46634 | TOTOLINK A7100RU 7.4cu.2313_B20191024 setting/setWiFiWpsCfg wscDisabled command injection (EUVD-2022-49438)
A vulnerability identified as critical has been detected in TOTOLINK A7100RU 7.4cu.2313_B20191024. Affected by this issue is some unknown functionality of the file setting/setWiFiWpsCfg. Performing a manipulation of the argument wscDisabled
CVE-2022-46631 | TOTOLINK A7100RU 7.4cu.2313_B20191024 setting/setWiFiSignalCfg wscDisabled command injection (EUVD-2022-49435)
A vulnerability categorized as critical has been discovered in TOTOLINK A7100RU 7.4cu.2313_B20191024. Affected by this vulnerability is an unknown functionality of the file setting/setWiFiSignalCfg. Such manipulation of the argument wscDisa
CVE-2022-46624 | Online Graduate Tracer System 1.0.0 name cross site scripting (EUVD-2022-49428)
A vulnerability was found in Online Graduate Tracer System 1.0.0. It has been rated as problematic. This vulnerability affects unknown code. This manipulation of the argument Name causes cross site scripting. This vulnerability is handled a
CVE-2022-46623 | Judging Management System 1.0.0 username sql injection (EUVD-2022-49427)
A vulnerability was found in Judging Management System 1.0.0 and classified as critical. This affects an unknown part. Such manipulation of the argument Username leads to sql injection. This vulnerability is traded as CVE-2022-46623. Access
CVE-2022-46622 | Judging Management System 1.0 firstname cross site scripting (EUVD-2022-49426)
A vulnerability was found in Judging Management System 1.0. It has been rated as problematic. Impacted is an unknown function. The manipulation of the argument firstname leads to cross site scripting. This vulnerability is uniquely identifi
CVE-2022-46610 | 72crm 9.0 unrestricted upload (Issue 36 / EUVD-2022-49414)
A vulnerability, which was classified as critical, was found in 72crm 9.0. This affects an unknown function. Executing a manipulation can lead to unrestricted upload. This vulnerability is handled as CVE-2022-46610. The attack can be execut
CVE-2022-46603 | Inkdrop 5.4.1 Markdown File unrestricted upload (EUVD-2022-49407)
A vulnerability was found in Inkdrop 5.4.1 and classified as problematic. Affected by this issue is some unknown functionality of the component Markdown File Handler. The manipulation results in unrestricted upload. This vulnerability is id
USN-8933-1: RabbitMQ Server vulnerabilities
It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request forgery attack. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 L
CVE-2026-108126 | temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the request, and nothing in the ciphertext records that namespace. A caller whom the proxy authorizes only for namespace B, and who has obtained an encrypted payload from namespace A, can therefore have the p
temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the
CVE-2026-45165 | An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retri
CVE-2026-111172 | @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide, causing denial of service for the Node.js process.
@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toStr
CVE-2026-111170 | kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes while pathlib's join discards the base path, attackers can create or overwrite files anywhere the process can write.
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() str
CVE-2026-111169 | La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments into another document's thread without access.
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request thr
CVE-2026-111167 | GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property type value to crash dwgread, dwg2dxf, or any application using LibreDWG.
GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a cra
CVE-2026-111165 | libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and crashing the loading application.
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to r
CVE-2026-111164 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing applications that probe or play it.
UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bound
CVE-2026-111162 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing applications or exposing heap bytes through WildMidi_GetInfo().
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk le
CVE-2026-111160 | LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pd_kv_trans_params field to the /generate endpoint. Attackers can send a single request whose parameters cause pickle.loads to fail in InferSamplingParams, killing the inference thread while /health stays up and all later requests hang until restart.
LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pd_kv_trans_params field to the /generate endpoint. Attackers can send a single
CVE-2026-111159 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or leak uninitialized heap memory through extended attributes.
libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file wit
CVE-2026-111157 | SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or any libsox consumer to write a partially controlled 16-bit sample past the heap buffer allocated by wav_ms_adpcm_fmt().
SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or
CVE-2026-111155 | libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through mid_set_soundfont() to read heap memory out of bounds and crash the application.
libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file lo
CVE-2026-111154 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen 16-bit values near the stack Layer object, causing crashes and stack memory corruption.
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with
CVE-2026-111152 | Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gme_track_info or gme_start_track, crashing libgme consumers.
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an o
CVE-2026-111150 | ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk to over-read heap memory and crash consumers.
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F ta
CVE-2026-111149 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to 64 KiB of heap, leaking memory into decoded pixels or crashing the process.
FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT fi
CVE-2026-111147 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application or expose up to about 32 KiB of adjacent heap memory.
Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/ED
CVE-2026-111145 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams. Attackers can supply a crafted winmail.dat TNEF attachment with a malicious PT_BINARY MAPI property to crash ytnefprint or libytnef callers and leak adjacent heap memory.
ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams. Attackers can supply a crafted winmail.dat TNEF attachment with a mal
CVE-2026-111144 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_xbin pointer and terminate the process.
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-f