181478 matches found
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...
firefox: thunderbird: Incorrect boundary conditions in the Graphics component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...
firefox: thunderbird: Mitigation bypass in the DOM: Networking component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...
firefox: thunderbird: Privilege escalation in WebExtensions
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...
firefox: thunderbird: Privilege escalation in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...
libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component
A flaw was found in libtiff. An attacker could exploit this vulnerability by processing a specially crafted file, leading to arbitrary code execution. This issue occurs within the thumbnail.c: main component. Successful exploitation could allow the attacker to take control of the affected system...
CVE-2026-72746
Removed by vendor...
CVE-2026-72745
Removed by vendor...
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...
vim security update
An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...
CVE-2026-73141
GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion...
CVE-2026-73153
GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...
CVE-2026-73150
GHSA-4f8x-49pf-3x5v: Buffer overflow in APRS message construction...
CVE-2026-73149
GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length...
CVE-2026-73147
GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client...
CVE-2026-73145
GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation...
CVE-2026-73144
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...