Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Found 131,157 fresh security advisories
Page 333 of 5,465

The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For the REPLY_KEYPPAD and ...

📅 2026-10-19 Inspect Dossier →
CVE-2026-76787 MEDIUM 5.9

The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder treats every descripto...

📅 2026-10-19 Inspect Dossier →

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocat...

📅 2026-10-19 Inspect Dossier →

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpack...

📅 2026-10-19 Inspect Dossier →

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target ...

📅 2026-10-19 Inspect Dossier →

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays ...

📅 2026-10-19 Inspect Dossier →

Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImag...

📅 2026-10-19 Inspect Dossier →

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation ...

📅 2026-10-19 Inspect Dossier →

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile...

📅 2026-10-19 Inspect Dossier →

A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient r...

📅 2026-10-19 Inspect Dossier →
Showing Page 333 of 5,465 • 131,157 newly disclosed advisories