OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS
cve-program ·
Vendor product: OpenImageIO
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: OpenImageIO
cve-program ·
Vendor product: OpenImageIO
cve-program ·
Vendor product: v6
cve-program ·
Vendor product: v6
cve-program ·
Vendor product: jabref
cve-program ·
Vendor product: chamilo-lms
cve-program ·
Vendor product: devicetype-library
cve-program ·
Vendor product: punchin-email
cve-program ·
Vendor product: scoold
cve-program ·
Vendor product: many-notes
cve-program ·
Vendor product: mport
cve-program ·
Vendor product: mport
cve-program ·
Vendor product: mport
cve-program ·
https://repo.hex.pm: tesla · https://github.com: elixir-tesla/tesla
cve-program ·
https://repo.hex.pm: tesla · https://github.com: elixir-tesla/tesla
cve-program ·
https://repo.hex.pm: tesla · https://github.com: elixir-tesla/tesla
cve-program ·
https://repo.hex.pm: tesla · https://github.com: elixir-tesla/tesla
cve-program ·
Vendor product: otp · Vendor product: stdlib · https://github.com: erlang/otp
cve-program ·
Vendor product: OpenImageIO
cve-program ·
https://repo.hex.pm: ash_authentication · https://github.com: team-alembic/ash_authentication
cve-program ·
Vendor product: itflow
cve-program ·
Vendor product: MapServer
cve-program ·
Vendor product: appointment-booking-software
cve-program ·
Vendor product: otp · Vendor product: erl_interface · https://github.com: erlang/otp
cve-program ·
Vendor product: mkp
cve-program ·
Vendor product: otp · Vendor product: erts · https://github.com: erlang/otp
cve-program ·
Vendor product: obsidian-web-mcp
cve-program ·
Vendor product: otp · Vendor product: ssl · https://github.com: erlang/otp
cve-program ·
Vendor product: otp · Vendor product: ssh · https://github.com: erlang/otp
osv · CVE-2026-59162 · GHSA-fx5j-qcqg-grpf
Go: github.com/xuri/excelize/v2
osv · CVE-2026-56379
NuGet: Magick.NET-Q16-AnyCPU · NuGet: Magick.NET-Q16-HDRI-AnyCPU · NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64
osv · CVE-2026-56371
NuGet: Magick.NET-Q16-AnyCPU · NuGet: Magick.NET-Q16-HDRI-AnyCPU · NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64
osv · CVE-2026-56376
NuGet: Magick.NET-Q16-AnyCPU · NuGet: Magick.NET-Q16-HDRI-AnyCPU · NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64
osv ·
NuGet: Magick.NET-Q16-AnyCPU
osv ·
NuGet: Magick.NET-Q16-AnyCPU
osv ·
NuGet: Magick.NET-Q16-AnyCPU
cve-program ·
https://git.proxmox.com: pmg-api
osv · CVE-2026-59723
npm: cline
osv · CVE-2026-61782
npm: @rsdoctor/rspack-plugin
osv · CVE-2026-61788
npm: @bytebase/dbhub
osv · CVE-2026-56744
npm: @bsv/wallet-toolbox · npm: @bsv/wallet-toolbox-client · npm: @bsv/wallet-toolbox-mobile
osv · CVE-2026-61784
npm: xhtml-purifier
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.