Security Check

security.bloxprod.io

Schwachstellen, die jetzt zählen.

CVE für Linux-Server, Android, Apple-Telefone, Windows, Browser, Krypto-Wallets und übrige Software. Ein Klick auf den Titel öffnet das Original beim Herausgeber.

12358Artikel
1698Kritisch
6401Hoch
1781Aktiv ausgenutzt
Alle StufenKritischHochMittelNiedrigAktiv ausgenutzt
Hoch 7.5Linux-Server

DSA-6611-1 imagemagick - security update

CVE-2026-109268imagemagick12. Okt 2026

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.

Original bei DebianAlle Quellen (4)
Hoch 7.5Linux-Server

DSA-6611-1 imagemagick - security update

CVE-2026-109263imagemagick12. Okt 2026

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.

Original bei DebianAlle Quellen (4)
Hoch 7.5Linux-Server

DSA-6611-1 imagemagick - security update

CVE-2026-109262imagemagick12. Okt 2026

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.

Original bei DebianAlle Quellen (4)
Hoch 7.5Software

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization…

CVE-2026-109261Imagemagick12. Okt 2026

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.

Original bei HinweisAlle Quellen (3)
Hoch 7.5Linux-Server

DSA-6611-1 imagemagick - security update

CVE-2026-109260imagemagick12. Okt 2026

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.

Original bei DebianAlle Quellen (4)
Hoch 7.5Linux-Server

DSA-6611-1 imagemagick - security update

CVE-2026-109258imagemagick12. Okt 2026

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.

Original bei DebianAlle Quellen (4)
Hoch 8.2Software

FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth…

CVE-2026-109257Freerdp12. Okt 2026

FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the server during context teardown.

Original bei HinweisAlle Quellen (3)
Mittel 6.5Linux-Server

Foreman: Schwachstelle ermöglicht Manipulation von Dateien und Umgehen von Sicherheitsvorkehrungen

CVE-2026-107193Red Hat Enterprise Linux, Open Source Foreman12. Okt 2026

A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.

Original bei Red HatAlle Quellen (7)
Hoch 7.8Software

ImageMagick: Mehrere Schwachstellen

CVE-2026-108693Debian Linux, Amazon Linux 2, Gentoo Linux, SUSE Linux, SUSE openSUSE, Open Source ImageMagick11. Okt 2026

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.

Original bei HinweisAlle Quellen (4)