A vulnerability exists in the Pillow Python imaging library affecting versions from 5.4.0 up to but not including 13.0.0. The CVSS 4.0 base score is 6.9, indicating a medium severity issue. The vulnerability allows an attacker to cause a limited impact without requiring privileges or user interaction. There are no known exploits in the wild, and no patch or remediation details are provided in the available data.
A high-severity vulnerability (CVE-2026-112400) affects the Pillow Python imaging library versions from 9.2.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The affected versions include multiple Ubuntu package builds of Pillow. No public exploits or known active exploitation have been reported. The vulnerability allows remote network attackers to cause a high impact without requiring privileges or user interaction.
A high-severity vulnerability (CVE-2026-112399) affects the Pillow Python imaging library versions from 8.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating it is exploitable remotely without authentication and requires no user interaction. The specific impact details are not fully described in the input data. Multiple Ubuntu package versions of Pillow are listed as affected. No public exploits or patch information are provided.
A critical vulnerability (CVE-2026-112398) affects the Pillow Python imaging library in versions prior to 13.0.0. The flaw is related to the handling of FlashPix files. It has a high CVSS 4.0 score of 9.2, indicating severe impact potential. No public exploits or vendor patch information are provided in the data. The affected versions include multiple Ubuntu package builds of Pillow versions 2.2.1, 2.3.0, 2.9.0, and 3.0.0. The vulnerability is network exploitable but requires high attack complexity and no privileges or user interaction. No cloud service is involved.
A high-severity vulnerability (CVE-2026-112397) affects the Pillow Python imaging library in versions prior to 13.0.0. The vulnerability allows for a significant impact without requiring user interaction or privileges. It is identified with a CVSS 4.0 score of 8.7, indicating a network exploitable flaw with high impact on availability. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patches are explicitly stated in the provided data.
A vulnerability exists in the Pillow Python imaging library affecting versions from 11.3.0 up to but not including 13.0.0. The flaw has a CVSS 3.1 base score of 5.9, indicating a medium severity issue primarily impacting availability. The vulnerability does not affect confidentiality or integrity but can cause denial of service. No public exploits or known active exploitation have been reported. The affected versions include various Ubuntu package builds of Pillow. No explicit patch or remediation details are provided in the available data.
CVE-2026-112392 is a high-severity vulnerability affecting the Pillow Python imaging library prior to version 13.0.0. The vulnerability relates to Pillow's rank-based functionality, though specific technical details are not provided. Multiple Ubuntu package versions of Pillow are affected. The CVSS 4.0 base score is 8.2, indicating a high impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No known exploits in the wild have been reported. No patch or remediation details are provided in the available data.
A medium severity vulnerability (CVE-2026-112395) affects the Pillow Python imaging library versions from 8.2.0 up to but not including 13.0.0. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact includes limited confidentiality loss and availability impact, with no integrity impact reported. The vulnerability affects multiple Ubuntu package versions of Pillow. No public exploits or known active exploitation have been reported. Patch status is not confirmed from the provided data.
CVE-2026-112394 is a medium severity vulnerability in the Pillow Python imaging library affecting certain Ubuntu package versions prior to 13.0.0. The vulnerability involves Pillow's P;2L and related components, though detailed technical specifics are not provided. The flaw has a CVSS 4.0 base score of 6.3, indicating a network exploitable issue with low complexity and partial impact on confidentiality and availability. No public exploits or known active exploitation have been reported. The affected versions are specific Ubuntu package builds of Pillow up to version 3.0.0-1build1.
Pillow, a Python imaging library, contains a critical vulnerability identified as CVE-2026-112393 affecting versions from 2.0.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 score of 9.2, indicating a high-severity security issue. The flaw allows network-based exploitation with high complexity and requires partial user interaction, resulting in high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild. The affected versions include multiple Ubuntu package builds of Pillow versions 2.2.1, 2.3.0, 2.9.0, and 3.0.0. No patch or remediation details are provided in the source data.
CVE-2026-112391 is a high-severity vulnerability affecting the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The vulnerability impacts availability but does not affect confidentiality or integrity. It has a CVSS 3.1 base score of 7.5. Specific affected Ubuntu package versions are listed, but no patch or remediation details are provided in the source data.
A high-severity vulnerability (CVE-2026-112390) affects the Pillow Python imaging library versions from 7.2.0 up to but not including 13.0.0. The vulnerability has a CVSS score of 7.5, indicating a network exploitable issue with no required privileges or user interaction, causing a high impact on availability. No known exploits are reported in the wild. The affected versions include several Ubuntu package versions of Pillow, but no specific technical details about the nature of the vulnerability are provided.
A medium severity vulnerability (CVE-2026-112300) has been identified in DiffSK configobj affecting versions up to 5.0.9. The flaw does not impact confidentiality or integrity but can cause a denial of service. No public exploits or active exploitation in the wild are known at this time.
A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.
A vulnerability exists in GIMP where importing a crafted SBZ palette without a certain condition can cause an issue. The flaw affects multiple specific versions of GIMP and has a medium severity rating with a CVSS score of 5.5. The impact is limited to availability, with no confidentiality or integrity impact reported.
Multiple vulnerabilities were discovered in PyJWT affecting various Ubuntu LTS releases and 26.10. These include improper handling of unknown key identifiers leading to potential denial of service via request amplification, improper handling of recursively nested JSON payloads causing application failure, malformed RSA key handling causing authentication failures or denial of service, and improper validation of OKP private key components allowing misuse of stolen tokens. Fixes are available in updated package versions for affected Ubuntu releases.
A NULL pointer dereference vulnerability exists in the avpriv_h264_has_num_reorder_frames function of libav. This flaw can cause a denial of service by crashing the application using the affected library. The vulnerability affects multiple specific versions of libav as listed.
CVE-2026-111749 is a low severity vulnerability affecting multiple specific versions of the Python aiohttp asynchronous HTTP client/server framework. The CVSS 4.0 score is 2.3, indicating limited impact. No public exploit or detailed technical description is provided. The affected versions are explicitly listed. No patch or remediation information is available in the provided data.
CVE-2026-111065 is a medium severity vulnerability in python-aiohttp, an asynchronous HTTP client/server framework for asyncio. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a network exploitable issue with low attack complexity and no privileges or user interaction required. The impact is limited to a low severity impact on availability with no confidentiality or integrity impact. Multiple specific versions of python-aiohttp are affected.
rdesktop versions up to and including 1.9.0 contain a heap out-of-bounds read vulnerability. This flaw can cause a denial of service by crashing the application but does not impact confidentiality or integrity. The vulnerability has a CVSS score of 6.5, indicating medium severity.