PT-2026-49688

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description A denial-of-service issue exists within the Audio/Video: Playback component. Recommendations Update to version 152 for Firefox. Update to version 152 for Thunderbird...

PT-2026-49675

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A memory safety bug exists in the software, which could lead to unexpected behavior or crashe...

PT-2026-49659

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A memory safety bug exists in the software, which could...

Security Vulnerabilities fixed in Thunderbird 152 — Mozilla

Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11,...

PT-2026-49669

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description A memory safety bug exists in the software, which could lead to unexpected behavior or crashes when handling memory operations. Recommendations Update to version 152 f...

PT-2026-49662

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description A use-after-free issue exists in the Graphics: WebGPU component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer...

PT-2026-49667

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A memory safety bug exists that could lead to instability or unauthorized actions by improper...

PT-2026-49660

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A use-after-free issue exists in the Networking: HTTP...

PT-2026-49671

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A mitigation bypass exists within the DOM security...

PT-2026-49689

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description Information disclosure occurs within the Password Manager component. Recommendations Update Firefox to version 152. Update Thunderbird to version 152...

PT-2026-49687

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description Incorrect boundary conditions exist within the Libraries component of the Network Security Services NSS, which is a set of libraries providing support for security...

PT-2026-49694

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description A denial-of-service issue exists within the Graphics:...

MAL-2025-192343 Malicious code in elf-stats-velvet-train-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18265736ea9a5d9727aadb6a21bf442587049cf9c8126b018a4915cf9842863a The package elf-stats-velvet-train-152 was found to contain malicious code...

Malicious code in elf-stats-velvet-train-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18265736ea9a5d9727aadb6a21bf442587049cf9c8126b018a4915cf9842863a The package elf-stats-velvet-train-152 was found to contain malicious code...

MAL-2025-192042 Malicious code in elf-stats-frosty-candy-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d1ad7e63d89899fbc848824ea96c3546253d50d95c7a7fee777fc2590cd55a The package elf-stats-frosty-candy-152 was found to contain malicious code...

Malicious code in elf-stats-frosty-candy-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d1ad7e63d89899fbc848824ea96c3546253d50d95c7a7fee777fc2590cd55a The package elf-stats-frosty-candy-152 was found to contain malicious code...

EUVD-2025-200910

Malicious code in elf-stats-frosty-candy-152 npm...

Amazon Linux 2023 : libnvfatbin-13, libnvfatbin-devel-13 (ALAS2023NVIDIA-2025-152)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-152 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Code injection

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

CVE-2016-10793

CVE-2016-10793 affects cPanel prior to 59.9999.145. The root cause is an incorrect #! in Mail::SPF scripts that enables arbitrary code execution. Affected software is cPanel versions before 59.9999.145; the vulnerability allows code execution with the privilege level of the web server. Remediatio...