|
11
|
7.0 |
HIGH
Local
|
microsoft
|
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…
|
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
New
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2026-45603
|
2026-06-12 03:46 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
12
|
4.7 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen w…
New
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2026-48733
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
13
|
5.5 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack overflow due to a m…
New
|
CWE-674
Uncontrolled Recursion
|
CVE-2026-48734
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
14
|
5.9 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check of a return value could lead to a heap buffer …
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-48994
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
15
|
7.5 |
HIGH
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image wi…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-49218
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
16
|
5.5 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy by…
New
|
CWE-22 CWE-78 CWE-200 CWE-863
Path Traversal OS Command Information Exposure Incorrect Authorization
|
CVE-2026-49219
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
17
|
7.5 |
HIGH
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMe…
New
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-53460
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
18
|
7.5 |
HIGH
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can result in an out of …
New
|
CWE-787
Out-of-bounds Write
|
CVE-2026-53461
|
2026-06-12 03:44 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
19
|
5.9 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when an allocation fails in CheckPrimitiveExtent this can resu…
New
|
CWE-416
Use After Free
|
CVE-2026-53462
|
2026-06-12 03:43 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
20
|
4.3 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a nu…
New
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-53463
|
2026-06-12 03:43 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|