CVE Program partner

talos

Talos

API
CVEs, 365 days1092,545 all time, 125 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationTalos
RoleCNA
TypeResearcher
Reports tomitre
ScopeThird-party products it researches.
Advisorieshttps://talosintelligence.com/vulnerability_reports

Latest CVEs · RSS

  • CVE-2026-41958 2026-10-07 · CVSS 6.5
    A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted
  • CVE-2026-42532 2026-10-07 · CVSS 5.5
    A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml fi
  • CVE-2026-22879 2026-06-25 · CVSS 8.1
    A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially craft
  • CVE-2026-25104 2026-05-26 · CVSS 7.8
    A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead t
  • CVE-2026-25713 2026-05-26 · CVSS 7.8
    A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that co
  • CVE-2026-28764 2026-05-21 · CVSS 7.8
    A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file ca
  • CVE-2026-22554 2026-05-20 · CVSS 7.8
    A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file can
  • CVE-2025-58074 2026-05-04 · CVSS 8.8
    A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during
  • CVE-2026-20911 2026-04-07 · CVSS 9.8
    A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malic
  • CVE-2026-21413 2026-04-07 · CVSS 9.8
    A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted m
  • CVE-2026-20889 2026-04-07 · CVSS 9.8
    A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to
  • CVE-2026-24660 2026-04-07 · CVSS 8.1
    A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to
  • CVE-2026-24450 2026-04-07 · CVSS 8.1
    An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead
  • CVE-2026-20884 2026-04-07 · CVSS 8.1
    An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a he
  • CVE-2025-66342 2026-03-17 · CVSS 7.8
    A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to
  • CVE-2025-62500 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-61979 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-64733 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-66000 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-64301 2026-03-17 · CVSS 7.8
    An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vu
  • CVE-2025-64776 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-64735 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-66633 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-58427 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul
  • CVE-2025-66617 2026-03-17 · CVSS 6.1
    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vul

All CVE Program partners