Veille CVE

Jeudi 25 juin 2026

3 CVE sur 3

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « coder » ✕
  1. CVE-2026-46602 7.5 Élevée

    golang.org/x/image/tiff

    The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.

  2. CVE-2026-46601 7.5 Élevée

    golang.org/x/image/webp

    The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

  3. CVE-2026-5305 8.8 Élevée

    Unknown Email Address Encoder · Unknown email-encoder-premium

    The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks