CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. The issue relates to branch selection control associated with a faulting address.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a 'Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2.'
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file. The issue is related to DLL registration functions.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file. The issue is related to the DllUnregisterServer function.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file. The issue is related to the use of data from a faulting address as arguments in subsequent function calls.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a possible stack corruption.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file. The issue relates to branch selection control due to a faulting address.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a possible stack corruption.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to heap corruption.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file. The issue is related to DLL registration functions.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a 'Read Access Violation'.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file. The issue is related to a Read Access Violation on Block Data Move.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS