CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Control Flow.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a User Mode Write AV.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file.
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file, related to a 'User Mode Write AV'.
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a User Mode Write AV concerning the FPX_GetScanDevicePropertyGroup function.
FastStone Image Viewer 6.2 has a 'User Mode Write AV' issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file mishandled by FSViewer.exe.
Notepad++ version 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 may allow user-assisted attackers to execute code via a crafted file due to a code flow control issue. An attack may occur when a victim obtains an untrusted crafted file from a remote location and issues several user-defined commands.
FastStone Image Viewer 6.2 has a 'Data from Faulting Address may be used as a return value' issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe.
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in 'Browser' mode, due to a 'Stack Buffer Overrun' issue.
IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, due to a 'User Mode Write AV near NULL' issue.
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted .mkv file mishandled during the opening of a directory in 'Browser' mode, due to a 'User Mode Write AV near NULL' in XnView.exe.
IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service (Heap Corruption and application crash) in processing a FlashPix (.FPX) file.
IrfanView version 4.44 (32bit) has a branch selection control issue that may allow attackers to execute arbitrary code via a crafted file.
Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands.
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted .mov file mishandled during the opening of a directory in 'Browser' mode, due to a 'User Mode Write AV near NULL' in XnView.exe.
WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, due to a 'User Mode Write AV near NULL' in WinDjView.exe.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS