Vulnerability Reports

Current Report Totals for 2026

69

Open Reported Zero-DaysReported to the vendor but not yet publicly disclosed.
103

Publicly Disclosed Vulnerabilities
Report ID Title Report Date CVE Number CVSS Score
TALOS-2026-2426 Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability 2026-08-19 CVE-2026-58613 8.8
TALOS-2026-2427 Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability 2026-08-12 CVE-2026-49177 8.4
TALOS-2026-2443 Microsoft Windows NETIO.sys NsipGetAllInformationProviderParameters Information Disclosure Vulnerability 2026-07-16 CVE-2026-50475 5.5
TALOS-2026-2420 Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability 2026-07-09 CVE-2026-57256 7.8
TALOS-2026-2410 WolfSSL wolfSSL X.509 registeredID name constraints enforcement improper input validation vulnerability 2026-07-02 CVE-2026-5263 7.4
TALOS-2026-2370 GeoVision GeoWebPlayer Websocket Server lack of authentication vulnerability 2026-07-01 CVE-2026-13125 8.8
TALOS-2026-2375 GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerabilities 2026-07-01 CVE-2026-57273,CVE-2026-57274,CVE-2026-57275,CVE-2026-57276,CVE-2026-57277,CVE-2026-57278 8.3
TALOS-2026-2373 GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerabilities 2026-07-01 CVE-2026-13131,CVE-2026-13132,CVE-2026-57264,CVE-2026-57265,CVE-2026-57266,CVE-2026-57267,CVE-2026-57268,CVE-2026-57269,CVE-2026-57270,CVE-2026-57271,CVE-2026-57272 8.3
TALOS-2026-2409 WolfSSL wolfSSL X.509 iPAddress name constraints enforcement improper input validation vulnerability 2026-07-01 CVE-2026-7532 9.1
TALOS-2026-2408 WolfSSL wolfSSL PKCS#7 OtherRecipientInfo integer underflow vulnerability 2026-07-01 CVE-2026-6678 7.5
TALOS-2026-2366 vtk vtk-dicom vtkDICOMItem::FindDataElementOrInsert heap-based buffer overflow vulnerability 2026-06-25 CVE-2026-22879 8.1
TALOS-2026-2377 GeoVision GV-I/O Box 4E DVRSearch CMD_IP_SET buffer overflow vulnerabilities 2026-06-23 CVE-2026-12485,CVE-2026-12846,CVE-2026-12847,CVE-2026-12848 10
TALOS-2026-2379 GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerabilities 2026-06-23 CVE-2026-12486,CVE-2026-12849,CVE-2026-12850,CVE-2026-12851 9.1
TALOS-2026-2411 GeoVision GV-VMS V20 GV-Cloud memory corruption vulnerability 2026-06-23 CVE-2026-12488 6.2
TALOS-2026-2444 Google Chrome AddGenericPassword infomation overwrite vulnerability 2026-06-23 -- 5.3
TALOS-2026-2382 Internet Systems Consortium BIND DNSSEC DNSKEY Extended Flags denial of service vulnerability 2026-06-18 -- 7.5
TALOS-2026-2328 GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability 2026-06-15 CVE-2026-42367 6.5
TALOS-2026-2327 GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities 2026-06-15 CVE-2026-7371,CVE-2026-42366 7.4
TALOS-2025-2326 GeoVision LPC2011/LPC2211 DdnsSetting.cgi OS command injection vulnerability 2026-06-15 CVE-2026-42364 9.9
TALOS-2025-2322 GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability 2026-06-15 CVE-2026-7161 9.3
TALOS-2026-2369 GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability 2026-06-15 CVE-2026-42370 9
TALOS-2026-2333 GeoVision GV-VMS V20 WebCam Server stack overflow vulnerabilities 2026-06-15 CVE-2026-7372,CVE-2026-42369 10
TALOS-2025-2332 GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability 2026-06-15 CVE-2026-42365 8.6
TALOS-2026-2329 GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability 2026-06-15 CVE-2026-42368 9.9
TALOS-2026-2367 MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability 2026-05-25 CVE-2026-25104 7.8
TALOS-2026-2368 MediaArea MediaInfoLib ID3v2 parsing heap-based buffer overflow vulnerability 2026-05-25 CVE-2026-25713 7.8
TALOS-2026-2374 MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability 2026-05-20 CVE-2026-22554 7.8
TALOS-2026-2371 MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability 2026-05-20 CVE-2026-28764 7.8
TALOS-2025-2305 Tp-Link Archer AX53 v1.0 dnsmasq configuration restore TFTP server enable vulnerability 2026-05-07 CVE-2026-30817 6.8
TALOS-2025-2308 Tp-Link Archer AX53 v1.0 Openvpn configuration restore client_connect OS command injection vulnerability 2026-05-07 CVE-2026-30815 9.1
TALOS-2025-2302 Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability 2026-05-07 CVE-2026-30814 9.1
TALOS-2025-2303 Tp-Link Archer AX53 v1.0 Openvpn configuration restore script_security OS command injection vulnerability 2026-05-07 CVE-2026-30815 9.1
TALOS-2025-2304 Tp-Link Archer AX53 v1.0 configuration restore crt.sed vulnerability 2026-05-07 CVE-2026-30816 6.8
TALOS-2025-2306 Tp-Link Archer AX53 v1.0 dnsmasq configuration restore dhcpscript OS command injection vulnerability 2026-05-07 CVE-2026-30818 9.1
TALOS-2025-2307 Tp-Link Archer AX53 v1.0 Openvpn configuration restore client_disconnect OS command injection vulnerability 2026-05-07 CVE-2026-30815 9.1
TALOS-2025-2309 Tp-Link Archer AX53 v1.0 Openvpn configuration restore route_up OS command injection vulnerability 2026-05-07 CVE-2026-30815 9.1
TALOS-2025-2276 Norton Secure VPN Installation Insecure Operation On Junction Privilege Escalation Vulnerability 2026-05-04 CVE-2025-58074 8.8
TALOS-2026-2381 OpenVPN TLS Crypt v2 Client Key Extraction denial of service vulnerability 2026-04-27 CVE-2026-35058 7.7
TALOS-2025-2274 Adobe Photoshop Installation Privilege Escalation Vulnerability 2026-04-22 CVE-2026-34632 8.2
TALOS-2026-2330 LibRaw HuffTable::initval heap-based buffer overflow vulnerability 2026-04-07 CVE-2026-20911 9.8
TALOS-2026-2363 LibRaw uncompressed_fp_dng_load_raw integer overflow vulnerability 2026-04-07 CVE-2026-24450 8.1
TALOS-2026-2359 LibRaw x3f_load_huffman heap-based buffer overflow vulnerability 2026-04-07 CVE-2026-24660 8.1
TALOS-2026-2358 LibRaw x3f_thumb_loader heap-based buffer overflow vulnerability 2026-04-07 CVE-2026-20889 9.8
TALOS-2026-2331 LibRaw lossless_jpeg_load_raw heap-based buffer overflow vulnerability 2026-04-07 CVE-2026-21413 9.8
TALOS-2026-2364 LibRaw deflate_dng_load_raw integer overflow vulnerability 2026-04-07 CVE-2026-20884 8.1
TALOS-2026-2365 Foxit Reader List Box Calculate Array Use-After-Free Vulnerability 2026-03-31 CVE-2026-3779 7.8
TALOS-2025-2281 Hangzhou Hikvision Digital Technology Co., Ltd. Face Recognition Modules SADP XML parsing stack-based buffer overflow vulnerability 2026-03-18 CVE-2025-66176 8.8
TALOS-2025-2310 Canva Affinity EMF File EMR_CREATEDIBPATTERNBRUSHPT DIBHeaderInfo HeaderSize Out-Of-Bounds Write Vulnerability 2026-03-17 CVE-2025-64301 7.8
TALOS-2025-2311 Canva Affinity EMF File EMR_BITBLT offBmiSrc Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-64776 6.1
TALOS-2025-2297 Canva Affinity EMF File EMR_FRAMERGN Type Confusion Vulnerability 2026-03-17 CVE-2025-66342 7.8
TALOS-2025-2300 Canva Affinity EMF File EMR_CREATEDIBPATTERNBRUSHPT offBmi Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-64733 6.1
TALOS-2025-2312 Canva Affinity EMF File EMR_STRETCHBLT offBmiSrc Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-64735 6.1
TALOS-2025-2319 Canva Affinity EMF File EMR_EXTSELECTCLIPRGN CountRects Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-66042 6.1
TALOS-2025-2320 Canva Affinity EMF File EMR_POLYGON Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-65119 6.1
TALOS-2025-2299 Canva Affinity EMF File EMR_HEADER offDescription Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-61979 6.1
TALOS-2025-2313 Canva Affinity EMF File EMR_STRETCHBLT cbBitsSrc Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-66633 6.1
TALOS-2025-2325 Canva Affinity EMF File EMR_POLYPOLYLINE Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2026-22882 6.1
TALOS-2025-2298 Canva Affinity EMF File EMR_HEADER nDescription Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-62500 6.1
TALOS-2025-2324 Canva Affinity EMF File EMR_POLYBEZIERTO16 Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2026-20726 6.1
TALOS-2025-2321 Canva Affinity EMF File EMR_EXTTEXTOUTA offDx Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-62403 6.1
TALOS-2025-2316 Canva Affinity EMF File EMR_POLYBEZIER16 Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-47873 6.1
TALOS-2025-2315 Canva Affinity EMF File EMR_POLYPOLYLINE16 Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-66617 6.1
TALOS-2025-2317 Canva Affinity EMF File EMR_POLYBEZIER Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-61952 6.1
TALOS-2025-2318 Canva Affinity EMF File EMR_POLYBEZIERTO Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-66503 6.1
TALOS-2025-2314 Canva Affinity EMF File EMR_EXTTEXTOUTW offDx Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-58427 6.1
TALOS-2025-2301 Canva Affinity EMF File EMR_POLYDRAW Count Out-Of-Bounds Read Vulnerability 2026-03-17 CVE-2025-66000 6.1
TALOS-2025-2283 Tp-Link AX53 V1.0 tmpServer opcode 0x411 buffer overflow vulnerability 2026-03-16 CVE-2025-59482 9.1
TALOS-2025-2284 Tp-Link AX53 v1.0 tmpServer opcode 0x429 stack-based buffer overflow vulnerability 2026-03-16 CVE-2025-62405 9.1
TALOS-2025-2291 Tp-Link AX53 v1.0 SSH Hostkey misconfiguration vulnerability 2026-03-16 CVE-2025-62501 8.1
TALOS-2025-2286 Tp-Link AX53 v1.0 tmpServer opcode 0x442 out-of-bounds write vulnerability 2026-03-16 CVE-2025-61983 9.1
TALOS-2025-2289 Tp-Link AX53 v1.0 tmpServer opcode 0x1003 stack-based buffer overflow vulnerability 2026-03-16 CVE-2025-58455 9.1
TALOS-2025-2287 Tp-Link AX53 v1.0 tmpServer opcode 0x643 stack-based buffer overflow vulnerability 2026-03-16 CVE-2025-62404 9.1
TALOS-2025-2285 Tp-Link AX53 v1.0 tmpServer opcode 0x441 Write-What-Where vulnerability 2026-03-16 CVE-2025-59487 9.1
TALOS-2025-2290 Tp-Link AX53 v1.0 tdpServer ssh port update stack-based buffer overflow vulnerability 2026-03-16 CVE-2025-62673 10.0
TALOS-2025-2288 Tp-Link AX53 v1.0 tmpServer opcode 0xe01 out-of-bounds write vulnerability 2026-03-16 CVE-2025-61944 9.1
TALOS-2025-2294 Tp-Link Archer AX53 v1.0 tmpServer opcode 0x437 heap-based buffer overflow vulnerability 2026-03-16 CVE-2025-58077 9.1
TALOS-2025-2293 Microsoft DirectX End-User Runtime Web Installer Privilege Escalation Vulnerability 2026-03-11 CVE-2025-68623 8.8
TALOS-2025-2323 The Biosig Project libbiosig ABF parsing out-of-bounds read vulnerability 2026-03-03 CVE-2025-64736 6.1
TALOS-2026-2362 The Biosig Project libbiosig Nicolet WFT parsing heap-based buffer overflow vulnerability 2026-03-03 CVE-2026-20777 8.1
TALOS-2026-2361 The Biosig Project libbiosig Intan CLP parsing heap-based buffer overflow vulnerability 2026-03-03 CVE-2026-22891 9.8
TALOS-2025-2292 OpenCFD OpenFOAM Code Stream directive arbitrary code execution vulnerability 2026-02-18 CVE-2025-61982 7.8
TALOS-2025-2267 MedDream PACS Premium modifyTranscript reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-53707 6.1
TALOS-2025-2263 MedDream PACS Premium modifyEmail reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-57881 6.1
TALOS-2025-2269 MedDream PACS Premium notifynewstudy reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-57786 6.1
TALOS-2025-2259 MedDream PACS Premium modifyAnonymize reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-55071 6.1
TALOS-2025-2270 MedDream PACS Premium sendOruReport reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-44000 6.1
TALOS-2025-2273 MedDream PACS Premium encapsulatedDoc arbitrary file read vulnerability 2026-01-20 CVE-2025-53912 9.6
TALOS-2025-2264 MedDream PACS Premium modifyHL7App reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-58080 6.1
TALOS-2025-2255 MedDream PACS Premium emailfailedjob reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54495 6.1
TALOS-2025-2261 MedDream PACS Premium modifyAutopurgeFilter reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54814 6.1
TALOS-2025-2271 MedDream PACS Premium config.php multiple reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-58089,CVE-2025-58093,CVE-2025-58090,CVE-2025-58091,CVE-2025-58088,CVE-2025-58087,CVE-2025-58094,CVE-2025-58095,CVE-2025-58092 6.1
TALOS-2025-2262 MedDream PACS Premium modifyCoercion reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54861 6.1
TALOS-2025-2260 MedDream PACS Premium modifyAeTitle reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54852 6.1
TALOS-2025-2257 MedDream PACS Premium existingUser reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54778 6.1
TALOS-2025-2258 MedDream PACS Premium fetchPriorStudies reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-46270 6.1
TALOS-2025-2265 MedDream PACS Premium modifyHL7Route reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-53854 6.1
TALOS-2025-2266 MedDream PACS Premium modifyRoute reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-57787 6.1
TALOS-2025-2272 MedDream PACS Premium ldapUser reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-36556 6.1
TALOS-2025-2256 MedDream PACS Premium encapsulatedDoc reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54157 6.1
TALOS-2025-2268 MedDream PACS Premium modifyUser reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54853 6.1
TALOS-2025-2253 MedDream PACS Premium autoPurge reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-54817 6.1
TALOS-2025-2254 MedDream PACS Premium downloadZip reflected cross-site scripting (XSS) vulnerability 2026-01-20 CVE-2025-53516 6.1
TALOS-2025-2279 Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability 2026-01-15 CVE-2025-61973 8.8
TALOS-2025-2278 Foxit Reader Text Widget Format Use-After-Free Vulnerability 2025-12-19 CVE-2025-59488 8.8