libheif

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 27, 2026
Last mentionedAug 27, 2026

Timeline

1 articles · newest first

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Vercel patches two critical Next.js unauthenticated RCE flaws: a libheif AVIF heap overflow (CVSS 9.5) and a Windows path traversal (CVE-2026-75604).

The Hacker NewsAug 27, 15:16 UTC · Aug 27, 2026VulnerabilityCVE-2026-756042 · 1 read

Related CVEs

by mentions

CVE-2026-756042%9.0
Unauthenticated RCE in Next.js on Windows-hosted servers
published Sep 1, 2026Vercel Next.js — applications using the Pages Router (without Cache Components) on Windows-hosted serversPoC

Appears with

sharpproduct · 1
Next.jsproduct · 1
Vercelvendor · 1
Hacktronorganization · 1
Vercelorganization · 1
libheifproduct · 1

Entities are extracted by the model from each article. First seen Aug 27, 2026, last mentioned Aug 27, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.