Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

iccDEV

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.

CVE-2026-21493 is a vulnerability identified in the iccDEV library, a set of tools and libraries for handling ICC color management profiles widely used in color-critical applications. The flaw resides in the CIccSingleSampledeCurveXml class, specifically during the XML curve serialization process. This vulnerability is classified as a type confusion issue, where the program incorrectly interprets the type of data in memory, leading to potential memory corruption. The underlying weakness is related to CWE-188 (Reliance on Data/Memory Layout), CWE-703 (Improper Check or Handling of Exceptional Conditions), and CWE-843 (Access of Resource Using Incompatible Type). The vulnerability affects versions of iccDEV up to 2.3.1.1 and was fixed in version 2.3.1.2. According to the CVSS v3.1 score of 6.6, the attack vector is local (AV:L), with low attack complexity (AC:L), no privileges required (PR:N), but requires user interaction (UI:R). The scope is unchanged (S:U), and the impact affects confidentiality and integrity to a low degree but has a high impact on availability, indicating potential for denial of service or application crashes. No known exploits have been reported in the wild, but the vulnerability could be leveraged by attackers with local access to cause application instability or potentially escalate attacks through memory corruption. The issue is particularly relevant for software that processes ICC profiles, such as professional imaging, printing, and publishing applications, which rely on iccDEV for accurate color management.

Detailed information about CVE-2026-21493: CWE-188: Reliance on Data/Memory Layout in InternationalColorConsortium iccDEV affecting InternationalColorConsortium

CVE-2026-21493: CWE-188: Reliance on Data/Memory Layout in InternationalColorConsortium iccDEV - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21493: CWE-188: Reliance on Data/Memory Layout in InternationalColorConsortium iccDEV

Threats Tagged 'cve-2026-21493'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-21493'

Lead Pen Test Professional