G
Vendor security profile
gem
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit2
Patch rate%100
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
2
5
0
2
0
CVE KEV
CVE severity distribution
9toplam CVE
High4 (44%)
Medium5 (56%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%22
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
2.0
CVE-2026-109282
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders
I
Patch verified
4.8
CVE-2026-109281
ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option
I
Patch verified
2.0
CVE-2026-109280
ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option
I
Patch verified
2.0
CVE-2026-109279
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access
I
Patch verified
6.3
CVE-2026-109278
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation
I
Patch verified
4.8
CVE-2026-109277
ImageMagick before 7.1.2-32 Policy Bypass via -script Operation
I
Patch verified
6.9
CVE-2026-109276
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder
I
Patch verified
6.3
CVE-2026-109275
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder
I
Patch verified
2.0
CVE-2026-109274
ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script
I
Patch verified
6.9
CVE-2026-109273
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder
I
Patch verified