CWE-758

CVEs classified under CWE-758, newest first.

4 CVEsRSS

CVE-2026-100771High· 8.1

Undefined behavior in the DOM: Streams component

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

▾ Twilightmozilla · firefoxEPSS 0.31%via NVD

CVE-2026-54604Medium· 5.3

1mo ago

OpenSlide is a C library for reading whole slide image files

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to request a full-height d…

▾ Sunlitopenslide · openslideEPSS 0.53%via NVD

CVE-2026-50185Medium

3mo ago

Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set

▾ Sunlitcmov · cmovEPSS 0.16%via GHSA

CVE-2026-22858Critical· 9.1

9mo ago

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 …

▾ Midnightfreerdp · freerdpEPSS 0.70%via NVD