Browse CVEs by Ecosystem and Severity

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

ImageMagick: Memory Leak in ICON decoder when allocation fails

ImageMagick: Memory leak in VIFF encoder when allocation fails

ImageMagick: Memory Leak in MIFF encoder when allocaton fails

ImageMagick: Memory Leak in YUV decoder when opening of blob fails

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

ImageMagick: Memory Leak in hough lines operation when an operation fails

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

ImageMagick: Information Disclosure when printing profiles with debug enabled

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

ImageMagick: Use-After-Free when freetype initialization fails

ImageMagick: Policy Bypass in script operation due to missing checks

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

ImageMagick: Policy Bypass possible with matrix-backed operations

ImageMagick: Policy Bypass in concatenate operation due to missing checks

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

ImageMagick: Infinite Loop in connected-components when providing invalid arguments

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

ImageMagick: Use-After-Free in crafted 8BIM when identifying an image

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability

AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

Prompty: Arbitrary file read via file reference expansion

dd-trace-dotnet: Improper parsing of W3C baggage headers may lead to DoS

Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)