firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...

firefox: thunderbird: Mitigation bypass in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloade...

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN is a modular espionage framework used against targets in Israel. This report expands on two earlier publications: the first was published in June 2026 as part of our Kaspersky Threat Intelligence Reporting service, and the second was published on Securelist the following month,...

Security update for python312

This update for python312 fixes the following issues: Security issues fixed: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-3276: quadratic complexity in unicodedata.normalize can lead t...

SUSE-SU-2026:3569-1 Security update for python312

This update for python312 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-3276: quadratic complexity in unicodedata.normalize can le...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-2766, but with wasm Status: validated crash PoC U...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-2764, but with wasm Status: analysis + validated P...

nginx 1.27.0 MP4 Module Denial of Service

A proof of concept exploit for a denial of service vulnerability in nginx version 1.27.0. A 32-bit integer overflow in the ngxhttpmp4module MP4 processing code can cause an out-of-bounds read when processing a specially crafted MP4 file, resulting in a segmentation fault and termination of the...

RHEL 9 : thunderbird (RHSA-2026:53475)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53475 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

RHEL 8 : thunderbird (RHSA-2026:53455)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53455 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

Joomla Fabrik 4.6.6 Remote Code Execution

A proof of concept exploit for an unauthenticated remote code execution vulnerability in Fabrik version 4.6.6. The vulnerability exists in the Joomla Fabrik component's calc element, where attacker-controlled request values can be substituted directly into a site-defined formula that is...

RHEL 9 : thunderbird (RHSA-2026:53444)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53444 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

RHEL 8 : thunderbird (RHSA-2026:53453)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53453 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

RHEL 8 : thunderbird (RHSA-2026:53454)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53454 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

RHEL 9 : thunderbird (RHSA-2026:53446)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53446 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

RHEL 10 : thunderbird (RHSA-2026:53445)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53445 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

[SECURITY] [DLA 4729-1] nss security update

Debian LTS Advisory DLA-4729-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof August 10, 2026 https://wiki.debian.org/LTS Package : nss Version : 3.61-1+deb11u7 2:3.87.1-1+deb12u4 CVE ID : CVE-2026-16389 Tomoya Nakanishi discovered a flaw in nss, the Mozilla...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.13. - MFSA 2026-72 bsc1271649 CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for forwarding CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719...