p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 59

Vulnerabilities published for Operating systems in the last 30 days: 6681. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 160273

  1. CVE-2026-116158

    Low · CVSS 2EPSS 0.1%Fix available

    ImageMagick before 7.1.2-33 Memory Leak in magick compare

    ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-116157

    Medium · CVSS 4.8EPSS 0.11%Fix available

    ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading

    ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-116156

    Medium · CVSS 4.8EPSS 0.11%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-116155

    Medium · CVSS 6.9EPSS 0.3%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory each time they are processed, leading to resource exhaustion and denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-116154

    Medium · CVSS 6.9EPSS 0.3%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-116153

    Low · CVSS 2EPSS 0.12%Fix available

    ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit

    ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-116152

    Medium · CVSS 6.9EPSS 0.3%Fix available

    ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path

    ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger this error path repeatedly, causing small memory leaks that gradually consume process memory.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:6.9.11.60+dfsg-1.6+deb12u14
    • Update to 8:7.1.1.43+dfsg1-1+deb13u13
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-116151

    Medium · CVSS 6.3EPSS 0.27%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted images that are encoded to JNG to leak memory, potentially causing resource exhaustion and a limited denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-116150

    Low · CVSS 2.3EPSS 0.21%Fix available

    ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder

    ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-116149

    High · CVSS 7.2EPSS 0.35%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-116148

    Medium · CVSS 4.8EPSS 0.14%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing commands into the resulting MVG file.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-116147

    Medium · CVSS 6.3EPSS 0.27%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a DJVU image that, when processed under conditions where the allocation fails, crashes the process and causes a denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-116146

    Medium · CVSS 6.3EPSS 0.27%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image. Attackers can supply crafted MSL files for processing to repeatedly leak memory, causing resource exhaustion and denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-116145

    Low · CVSS 1.8EPSS 0.11%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply input to ImageMagick can evade configured security policy restrictions, allowing operations the policy was intended to block.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-32
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-116144

    Medium · CVSS 4.8EPSS 0.12%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-116143

    Medium · CVSS 4.8EPSS 0.12%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted, potentially exhausting resources.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-116142

    Medium · CVSS 4.8EPSS 0.12%Fix available

    ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box

    ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing adjacent heap memory.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-116141

    Medium · CVSS 6.9EPSS 0.33%Fix available

    ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder

    ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur after decoding. Attackers can supply crafted UHDR images with oversized dimensions that are fully decoded before policy limits are enforced, causing excessive resource consumption.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-116140

    Medium · CVSS 4.8EPSS 0.13%Fix available

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and execute the blocked program.

    imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagick imagemagickOperating systems
    • Update to 6.9.13-58
    • Update to 7.1.2-33
    • Update to 8:7.1.2.33+dfsg1-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. SUSE-SU-2026:4902-1

    Not ratedFix available

    Security update for container-suseconnect

    This update for container-suseconnect rebuilds it against the current go security release.

    container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnect container-suseconnectOperating systems
    • Update to 2.6.0-150000.4.99.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →