Security Vulnerabilities
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.1
EPSS Score
0.006
Published
2026-10-29
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score
4.3
EPSS Score
0.004
Published
2026-10-29
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project exports.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-10-29
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.
CVSS Score
6.5
EPSS Score
0.004
Published
2026-10-29
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
CVSS Score
6.5
EPSS Score
0.005
Published
2026-10-29
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
4.3
EPSS Score
0.006
Published
2026-10-29
ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.
CVSS Score
4.8
EPSS Score
0.001
Published
2026-10-29
ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.
CVSS Score
6.3
EPSS Score
0.003
Published
2026-10-29
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.
CVSS Score
8.8
EPSS Score
0.006
Published
2026-10-29
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-10-29