Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 contain a vulnerability identified as CVE-2026-113386. The vulnerability has a high severity with a CVSS score of 7.1, indicating it allows an attacker with low privileges to cause a partial impact on confidentiality and a high impact on integrity without user interaction. The exact nature of the vulnerability is not detailed in the provided data.
UnRTF by the GNU Project contains an out-of-bounds write vulnerability identified as CVE-2026-109831. This flaw can be triggered when a user processes crafted input, potentially leading to limited integrity and availability impacts. The vulnerability has a medium severity rating with a CVSS score of 5.4. Multiple specific versions of UnRTF are affected.
compress-lzf versions 1.0.3-1, 1.0.4-1, and 1.0.4-1build1 contain an out-of-bounds memory access vulnerability. This flaw can lead to a critical impact including high confidentiality loss and high availability impact. The vulnerability is identified as CVE-2026-109395 and has a CVSS score of 9.1, indicating a critical severity level.
CVE-2026-112901 is a medium severity vulnerability in the Pillow Python imaging library affecting versions prior to 13.0.0. The issue relates to the handling of XBM image headers. It has a CVSS 4.0 base score of 6.9, indicating a network exploitable vulnerability with low attack complexity and no required privileges or user interaction. No public exploits or known active exploitation have been reported. The affected versions include various Ubuntu package builds of Pillow up to version 3.0.0-1build1.
A critical vulnerability (CVE-2026-112900) affects the Pillow Python imaging library versions from 2.6.0 up to but not including 13.0.0. The vulnerability has a high CVSS 4.0 score of 9.2, indicating severe impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Specific technical details and exploit methods are not provided in the available data.
A medium severity vulnerability (CVE-2026-112898) affects the Pillow Python imaging library versions from 9.1.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a network exploitable issue with low impact on confidentiality. No public exploits or known active exploitation have been reported. The affected versions include various Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.
A high-severity vulnerability (CVE-2026-112897) affects the Pillow Python imaging library versions from 5.3.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The flaw allows for a high impact on confidentiality without requiring privileges or user interaction. Multiple Ubuntu package versions are listed as affected. No public exploits or vendor patch information are provided in the data.
CVE-2026-112896 is a high-severity vulnerability in the Pillow Python imaging library affecting TIFF encoding prior to version 13.0.0. The flaw allows an attacker to cause a high-impact security issue without requiring privileges or user interaction. Multiple Ubuntu package versions of Pillow are affected.
A high-severity vulnerability (CVE-2026-112895) affects the Pillow Python imaging library versions from 5.1.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The affected versions include multiple Ubuntu package builds of Pillow. No public exploits or vendor patch information are provided in the data.
A high-severity vulnerability (CVE-2026-112894) affects the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 score of 8.7, indicating a significant security risk. The flaw allows for a high impact without requiring privileges or user interaction. Multiple Ubuntu package versions of Pillow are affected. No public exploits or patches are currently documented in the provided data.
A high-severity vulnerability (CVE-2026-112893) affects the Pillow Python imaging library versions from 10.0.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.2, indicating a network exploitable issue with high impact. The affected versions include several Ubuntu package builds of Pillow. No public exploits or vendor patch information are provided in the data.
Pillow, a Python imaging library, contains a high-severity vulnerability affecting versions from 4.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. Specific details about the nature of the vulnerability are not provided in the available data. Multiple Ubuntu package versions are listed as affected. No public exploits or known active exploitation have been reported. Patch status is not confirmed due to lack of vendor advisory or patch information.
A medium severity vulnerability (CVE-2026-112891) affects the Pillow Python imaging library versions from 9.2.0 up to but not including 13.0.0. The CVSS 4.0 base score is 6.9, indicating a network exploitable issue with low impact on availability and no user interaction required. Specific technical details and impact vectors are limited in the provided data.
A high-severity vulnerability (CVE-2026-112406) affects the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The flaw allows an attacker to cause a high impact without requiring privileges, user interaction, or vector complexity. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patch information are provided in the input data.
CVE-2026-112405 is a high-severity vulnerability affecting the Pillow Python imaging library versions from 12.0.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The flaw allows for a high impact without requiring privileges, user interaction, or complex attack conditions. No public exploits or known active exploitation have been reported. The affected versions include multiple Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.
Pillow, a Python imaging library, contains a high-severity vulnerability identified as CVE-2026-112404 affecting versions from 8.1.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.8, indicating a network-exploitable flaw with low attack complexity and no required privileges or user interaction. The impact is high, with a vulnerability that can cause significant harm if exploited. There are no known exploits in the wild, and the affected versions include specific Ubuntu package versions listed. No patch or remediation details are provided in the available data.
A critical vulnerability exists in Pillow, a Python imaging library, affecting versions prior to 13.0.0. The issue relates to the JPEG decoder component. The vulnerability has a high CVSS 4.0 score of 9.2, indicating significant potential impact. No public exploits or detailed technical descriptions are provided. The affected versions include multiple Ubuntu package builds of Pillow from 2.2.1 through 3.0.0. No patch or remediation details are included in the data.
A high-severity vulnerability (CVE-2026-112402) affects the Pillow Python imaging library prior to version 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The affected versions include multiple Ubuntu package builds from 2.2.1 through 3.0.0-1build1. No public exploits or known active exploitation have been reported. The vulnerability allows an attacker to cause a high-impact security issue without requiring user interaction or privileges.
A vulnerability exists in the Pillow Python imaging library affecting versions from 5.4.0 up to but not including 13.0.0. The CVSS 4.0 base score is 6.9, indicating a medium severity issue. The vulnerability allows an attacker to cause a limited impact without requiring privileges or user interaction. There are no known exploits in the wild, and no patch or remediation details are provided in the available data.
A high-severity vulnerability (CVE-2026-112400) affects the Pillow Python imaging library versions from 9.2.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The affected versions include multiple Ubuntu package builds of Pillow. No public exploits or known active exploitation have been reported. The vulnerability allows remote network attackers to cause a high impact without requiring privileges or user interaction.