Vulnerabilities
Summary — last 7 days
New vulnerabilities4,946▲ 127 vs. last week
Critical / high2,058▼ 711 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)804▲ 741 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.9) | 0.17% | — | Libyal LibpffAI | 10/14/2026 | 10/16/2026 | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT_MV_STRING8, PT_MV_UNICODE or PT_MV_BINARY offsets to crash… | |
| Modified | High (7.8) | 0.50% | — | Libpff Project Libpff | 8/19/2021 | 6/17/2026 | An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file. | |
| Modified | Medium (5.5) | 0.43% | — | Libpff Project Libpff | 12/22/2018 | 6/17/2026 | libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. | |
| Modified | Medium (5.5) | 1.2% | — | Libpff Project Libpff | 6/19/2018 | 6/17/2026 | The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub |