CVE ID :CVE-2026-12977 Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago Description :A flaw was found in the deployment-operation family of WildFly Core. Certain handlers, such as upload-deployment-url, lack proper sensitivity classification, allowing an administrator with the…
CVE ID :CVE-2026-125250 Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago Description :FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder’s gif_image_write_image() in libavcodec because shrunk_buf is sized from the first frame’s linesize. Attackers…
CVE ID :CVE-2026-125244 Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago Description :FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder’s sh_entry_points() function in libavcodec Attackers can supply a crafted…
CVE ID :CVE-2026-125233 Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago Description :FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec that undercounts each CLUT segment header by two bytes. Attackers can supply…
CVE ID :CVE-2026-125229 Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago Description :FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec, because encode_init() never validates minimum frame dimensions for the median…
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole’s platform…
Attackers used the Ethersphere project’s own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code built to steal the wallet…
CVE ID :CVE-2026-119756 Published : Nov. 9, 2026, 5:28 p.m. | 59 minutes ago Description :Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap…
CVE ID :CVE-2026-19706 Published : Nov. 9, 2026, 5:20 p.m. | 1 hour, 8 minutes ago Description :During ABI bootstrap, the bootstrap node’s approve-csr.service approves and signs every CSR without identity validation. An attacker on the install network can retrieve the unauthenticated…
CVE ID :CVE-2026-124683 Published : Nov. 9, 2026, 5:17 p.m. | 1 hour, 10 minutes ago Description :Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in IndentationAwareTokenBuilder and IndentationAwareLexer. When producing DEDENT tokens, the token…