CVE Watch10 sept 2026

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution

CVSS

8.8

Alto

EPSS

0.3%

p19

KEV

—

Exploit Today

0-100

Publicado: 8 sept 2026 · Última mod.: 10 sept 2026 · CWE-704

EPSS · 30d

0.2%EPSS · 30 días0.3%

2026-09-092026-09-13

Descripción técnica

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Referencias oficiales

source.android.comhttps://source.android.com/docs/security/bulletin/2026/2026-09-01

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-863484.3 MED

—

———Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-0070116h CVE-2026-875464.3 MED

10.5%

——3Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)23h CVE-2026-588229.8 CRÍ

23.1%

——7In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.7d CVE-2026-695857.8 ALT

30.7%

——9Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.7d CVE-2026-502786.5 MED

16.0%

——5iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t underflow. The issue arises due to an embedded-profile read defect when parsing ICC profiles containing `icSigEmbeddedV5ProfileTag` data with `icSigEmbeddedProfileType` payloads. Version 2.3.2.1 patches the issue. No known workarounds are available.20d CVE-2026-100806.5 MED

22.1%

——7Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin process and deny service to all Boards users via a custom_focalboard_SUBSCRIBE_TEAM message with a non-string teamId.. Mattermost Advisory ID: MMSA-2026-0068729d