CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
LibTIFF version 4.0.7 has an undefined behavior issue related to 'shift exponent too large for 64-bit type long', which may lead to application crashes.
LibTIFF version 4.0.7 has an undefined behavior issue related to values outside the range of representable values of type unsigned char, which may allow remote attackers to cause application crashes or possibly have unspecified other impacts via a crafted image.
LibTIFF version 4.0.7 has an undefined behavior issue when values are outside the range of representable values of type short. This may allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
The tif_dirread.c file in LibTIFF 4.0.7 may have a divide-by-zero error that allows remote attackers to cause application crashes via a crafted image.
The tif_dirread.c in LibTIFF 4.0.7 has an undefined behavior issue related to 'outside the range of representable values of type float', which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
LibTIFF version 4.0.7 has an undefined behavior issue related to 'outside the range of representable values of type float', which may lead to application crashes or other unspecified impacts via a crafted image.
The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path.
An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, which may cause it to reboot due to a series of rapid requests. This affects all firmware versions prior to V3.03 BN 830.
CVE-2017-0583 is a privilege escalation vulnerability in the Qualcomm CP access driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it first requires compromising a privileged process and due to specific details of the vulnerability that limit its impact.
An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities.
CVE-2017-0581 is a privilege escalation vulnerability in the Synaptics Touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0580 is a privilege escalation vulnerability in the Synaptics Touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0579 is a privilege escalation vulnerability in the Qualcomm video driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0578 is a privilege escalation vulnerability in the DTS sound driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
The CVE-2017-0577 vulnerability in the HTC touchscreen driver may allow a local malicious application to elevate privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0573 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.