[UPDATE] [mittel] ImageMagick: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-21 10:26 UTC
  • Importiert: 2026-10-21 17:33 UTC
  • Quelle-ID: cert_bund
  • uid_hash: 03d94b8a1ca99cb3a75266dcabfdc8d1450991aadd367240ba9add2d130ed567

Inhalt

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-102635

MEDIUM

MEDIUM

6.3

2026-09-29

CVE-2026-106564

MEDIUM

MEDIUM

5.3

2026-10-07

CVE-2026-106565

MEDIUM

MEDIUM

5.9

2026-10-07

CVE-2026-106566

MEDIUM

MEDIUM

4

2026-10-07

CVE-2026-106567

MEDIUM

MEDIUM

5.9

2026-10-07

CVE-2026-106568

MEDIUM

MEDIUM

5.3

2026-10-07

CVE-2026-106569

MEDIUM

MEDIUM

5.3

2026-10-07

CVE-2026-106570

MEDIUM

MEDIUM

4.3

2026-10-07

CVE-2026-109258

MEDIUM

LOW

2.5

2026-10-12

CVE-2026-109259

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109260

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109261

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109262

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109263

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109264

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109265

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109266

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109267

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109268

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109269

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109270

MEDIUM

MEDIUM

4.8

2026-10-12

CVE-2026-109271

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109272

MEDIUM

MEDIUM

6.3

2026-10-12

CVE-2026-109273

MEDIUM

MEDIUM

6.9

2026-10-12

CVE-2026-109274

MEDIUM

LOW

2.5

2026-10-12

CVE-2026-109275

MEDIUM

CVE-2026-109276

MEDIUM

CVE-2026-109277

MEDIUM

CVE-2026-109278

MEDIUM

CVE-2026-109279

MEDIUM

CVE-2026-109280

MEDIUM

CVE-2026-109281

MEDIUM

CVE-2026-109282

MEDIUM

Externe Referenzen

Bezeichnung Typ CVE Quelle

ImageMagick Releases vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-233r-2p53-wqf5 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-2vwg-3g4g-qprm vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-3429-f84m-8qhw vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-462x-739v-qvq2 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-54hm-vrmh-75qj vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-54rx-5x9g-g465 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-58h4-rwr6-wj72 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-5j8x-vq8c-vrp9 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-69jx-j2x2-g5w4 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-7q74-r26w-fwcx vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-8x3v-wr32-qqh4 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-8xmr-6q99-c4x8 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-9f9w-84g3-vp2c vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-9p7q-63hw-mcr4 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-cvgp-q487-j22w vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-f32c-2v6j-wvh5 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-f983-243h-9x4r vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-g6p6-3ggg-3w7j vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-gwj6-pm7x-3r63 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-h499-883p-vph8 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-hvwf-wmm6-hvc3 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-j39j-wmxg-j8mv vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jjp4-3fwf-393j vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jph3-37cg-79wg vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-m9c7-gf3j-hx6h vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-pmqj-84pr-qc7c vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-pv8x-gq6w-gp4r vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-rvv7-5mh8-vcfc vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-v2x3-wpmg-c4w6 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-vv56-wmgw-m36w vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-vxwm-jfjc-3r4x vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-w288-jj5x-hhvp vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-w68r-6fmr-cvg4 vom 2026-09-27

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-xxrx-rjp3-27rj vom 2026-09-27

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:12078-1 vom 2026-10-20

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4691-1 vom 2026-10-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4753-1 vom 2026-10-20

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss