Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Linked advisories
Affected vendors and products
More on Unauthenticated
Other advisories
- Not ratedosv:CLEANSTART-2024-AA52543Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of servic...
- Not ratedosv:CLEANSTART-2024-TP55883Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access
- Not ratedosv:CLEANSTART-2026-BX77379security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...
- Highghsa:GHSA-494m-4556-wf5pimgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
- Not ratedosv:GHSA-494m-4556-wf5pimgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
- Highghsa:GHSA-mmq5-xm89-9pfgimgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
- Not ratedosv:GHSA-mmq5-xm89-9pfgimgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
- Not ratedosv:CVE-2026-63396Coop has a data leak via unauthenticated GraphQL Query.allOrgs
Other news entries
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- Linux kernel exploit enables remote root attacks on MPTCP serversNewsBleepingComputer
- Critical Linux kernel flaw allows remote root attacks on MPTCP serversNewsBleepingComputer
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- Cisco Finesse Server-Side Request Forgery VulnerabilityNewsCisco PSIRT
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
Source: https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html
ID