New Project Zero issue:

Adobe DNG SDK: Heap memory disclosure via LZW-compressed semantic masks rendered through MaskedRGBTables

https://project-zero.issues.chromium.org/issues/514643907

CVE-2026-47963

New Project Zero issue:

Adobe DNG SDK: Heap memory disclosure via uninitialized MCU buffer in Hasselblad 3FR lossless JPEG decode path

https://project-zero.issues.chromium.org/issues/514249399

CVE-2026-47934

New Project Zero issue:

Adobe DNG SDK: Heap memory disclosure in ReorderSubTileBlocks due to truncated row block count for clipped strips

https://project-zero.issues.chromium.org/issues/514247216

CVE-2026-47927

New Project Zero issue:

Adobe DNG SDK: heap buffer overflow in DecodeFPDelta due to missing pixel format validation and non-fatal error handling for semantic mask IFDs

https://project-zero.issues.chromium.org/issues/509923792

CVE-2026-47964

New Project Zero issue:

libheif: Heap-based Buffer Overflow in Uncompressed Image Tiled Decoding

https://project-zero.issues.chromium.org/issues/507396184

CVE-2026-47178

New Project Zero issue:

vpu driver close instance ioctl races with itself causing UAF

https://project-zero.issues.chromium.org/issues/493643407

CVE-2026-0163

New Project Zero issue:

Linux: recursively oopsing task can get preempted while TASK_DEAD, causing stack refcount overdecrement

https://project-zero.issues.chromium.org/issues/510793286

CVE-2026-46173

New Project Zero issue:

apple-zlib: uninitialized memory leak during decompression in inflate

https://project-zero.issues.chromium.org/issues/488250572

CVE-2026-28920

New Project Zero issue:

Linux >=6.10: io_uring: kernel memory read via unchecked address in ITER_UBUF/ITER_IOVEC iov_iter combined with non-checking nocache/flushcache accessors

https://project-zero.issues.chromium.org/issues/496923375

CVE-2026-43073

New Project Zero issue:

Adobe DNG SDK: heap corruption via negative pointer in dng_simple_image::Trim due to DefaultCropArea logic error

https://project-zero.issues.chromium.org/issues/479151242

CVE-2026-27259

New Project Zero issue:

Adobe DNG SDK: inconsistency between kMaxColorPlanes and kMaxSamplesPerPixel leads to multiple memory corruption issues

https://project-zero.issues.chromium.org/issues/477557327

CVE-2026-27258

New Project Zero issue:

Adobe DNG SDK: systemic out-of-bounds reads in rendering routines due to lack of NaN validation and missing index lower-bound checks

https://project-zero.issues.chromium.org/issues/480916830

CVE-2026-27260

New Project Zero issue:

Adobe DNG SDK: out-of-bounds write in dng_render_task::ProcessArea due to coordinate system confusion

https://project-zero.issues.chromium.org/issues/479111319

CVE-2026-27280

New Project Zero issue:

Adobe DNG SDK: integer overflow in dng_pixel_buffer::OptimizeOrder leads to out-of-bounds memory access

https://project-zero.issues.chromium.org/issues/478212931

CVE-2026-27281

New Project Zero issue:

Windows: OSK Shared Session Key EoP

https://project-zero.issues.chromium.org/issues/466303419

CVE-2026-24291

New Project Zero issue:

Windows: ATBroker CopySettingsToLockedDesktop Information Disclosure

https://project-zero.issues.chromium.org/issues/466301558

CVE-2026-25186

New Project Zero issue:

Windows: WinLogon WlAccessabilitypDeleteSATKey Registry Deletion EoP

https://project-zero.issues.chromium.org/issues/466300525

CVE-2026-25187

New Project Zero issue:

vpu driver allocation and free of dmabuf and iova can race causing UAF read

https://project-zero.issues.chromium.org/issues/465824679

CVE-2026-0121

New Project Zero issue:

vpu driver open and close instance ioctls race causing UAF

https://project-zero.issues.chromium.org/issues/463672550

CVE-2026-0112

New Project Zero issue:

vpu driver mmap allows OOB physical mappings

https://project-zero.issues.chromium.org/issues/463438263

CVE-2026-0106