HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-59087 — A flaw was found in the GIMP image manipulation program, specifically within its...

·Source: NIST NVD

Updated:

Executive Summary

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a heap overflow, allowing the attacker to write several kilobytes of controlled data beyond the intended memory buffer. Such an overflow can r

Analysis

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a heap overflow, allowing the attacker to write several kilobytes of controlled data beyond the intended memory buffer. Such an overflow can result in memory corruption, potentially leading to arbitrary code execution or a denial of service. CVSS Score: 7.8. Published: 2026-08-10T11:17:26.910.

Indicators of Compromise (1)

CVE (1)
CVE-2026-59087
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 10, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-19598 — The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to...

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON met

CVE-2026-19598
NIST NVD
MEDIUMVulnerability

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

[object Object]

CVE-2026-58231
r/cybersecurity
CRITICALVulnerability

NVD CRITICAL: CVE-2026-16142 — The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all ver...

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being registered for unauthenticated users and accepting an arbitrary truebooker_wp_user_id value, which is passed directly to wp_update_user() without verifying authentication or ownership. This makes it possible for unauthentic

CVE-2026-16142
NIST NVD