Known Vulnerabilities for Cursor by Anysphere
Listed below are 10 of the newest known vulnerabilities associated with "Cursor" by "Anysphere".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115774 json | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap... | Not Provided | 2026-10-23 | 2026-10-29 |
| CVE-2026-112272 json | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c tha... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-112019 json | cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the spars... | Not Provided | 2026-10-18 | 2026-10-20 |
| CVE-2026-109249 json | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advan... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-107614 json | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107391 json | music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.1... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-106061 json | A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allo... | Not Provided | 2026-10-07 | 2026-10-09 |
| CVE-2026-105938 json | Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication ... | Not Provided | 2026-10-21 | 2026-10-23 |
| CVE-2026-103414 json | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource fi... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-102761 json | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained pack... | Not Provided | 2026-09-29 | 2026-09-30 |