Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

70332

Tracked CVEs

6560

Critical

748

Exploited in wild

1434

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.8Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1895
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
6CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

42 matches

CVE-2026-114501Medium· 5.3

1w ago

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

▾ Sunlitpillow · pillowEPSS 0.37%via OSV

CVE-2026-112398Critical· 9.8PoC

1w ago

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

▾ Abyssalpillow · pillowEPSS 0.70%via OSV

GHSA-78g4-xqwv-q3g8High· 8.1

1w ago

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().l…

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()

▾ Twilightpillow · pillowvia OSV

CVE-2026-96637High· 6.5

1w ago

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

▾ Twilightpillow · pillowEPSS 0.37%via OSV

CVE-2026-96640High· 8.2PoC

1w ago

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

▾ Midnightpillow · pillowEPSS 0.58%via OSV

CVE-2026-96636Medium· 6.5

1w ago

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

▾ Sunlitpillow · pillowEPSS 0.34%via OSV

CVE-2026-96639Critical· 9.8

1w ago

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

▾ Midnightpillow · pillowEPSS 0.66%via OSV

CVE-2026-96642High· 6.5

1w ago

Pillow: TarIO negative size field causes infinite CPU-spin loop

▾ Twilightpillow · pillowEPSS 0.34%via OSV

CVE-2026-96641Medium· 6.5PoC

1w ago

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

▾ Twilightpillow · pillowEPSS 0.34%via OSV

CVE-2026-96644High· 8.1PoC

1w ago

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

▾ Midnightpillow · pillowEPSS 0.38%via OSV

CVE-2026-96643High· 6.5

1w ago

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

▾ Twilightpillow · pillowEPSS 0.37%via OSV

CVE-2026-96778High· 7.7PoC

1w ago

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

▾ Midnightpillow · pillowEPSS 0.45%via OSV

CVE-2026-112902High

2w ago

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

▾ Twilightpillow · pillowEPSS 0.56%via OSV

CVE-2026-112391Medium· 7.5

2w ago

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

▾ Sunlitpillow · pillowEPSS 0.58%via OSV

CVE-2026-112396Medium· 5.9

2w ago

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

▾ Sunlitpillow · pillowEPSS 0.69%via OSV

CVE-2026-112401Medium· 6.9

2w ago

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

▾ Sunlitpillow · pillowEPSS 0.48%via OSV

CVE-2026-112393Critical· 9.2PoC

2w ago

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

▾ Abyssalpillow · pillowEPSS 1.0%via OSV

CVE-2026-112392High· 7.5PoC

2w ago

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

▾ Midnightpillow · pillowEPSS 0.59%via OSV

CVE-2026-112405High· 7.5PoC

2w ago

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

▾ Midnightpillow · pillowEPSS 0.53%via OSV

CVE-2026-112406High· 7.5

2w ago

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

▾ Twilightpillow · pillowEPSS 0.42%via OSV

From the blog

All posts →

Oct 27, 2026

VulnSea has moved to vulnsea.com (and what changed since September)

The beta is over. VulnSea now runs at vulnsea.com, every old beta link redirects to the same page, and your account, API keys and watchlists came with it. Plus a round of hardening, faster pages, and new request limits agents should know about.

Sep 8, 2026

What's new: open corpus, three new MCP tools, vendor advisories, package pages

A summary of everything that shipped over the last two weeks — the whole corpus is open, agents get change feeds, alias resolution and EPSS movers, and the data now includes CVE.org, vendor CSAF, aggregated exploits and per-source scores.

Jul 1, 2026

Wiring VulnSea into an agent: a hands-on tutorial

A step-by-step guide to plugging VulnSea into automated and agentic workflows — poll the delta, triage without burning tokens, match an SBOM, and let an MCP-native model do the reasoning.

Sound the depths of every vulnerability.

Trending now

Feed

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().l…

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().l…

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial