firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-61358

The CVE-2026-61358 entry concerns Windows Accessibility Infrastructure (ATBroker.exe) with an improper link resolution before file access (‘link following’) vulnerability that allows an authorized, local attacker to elevate privileges. Reported CVSSv3.1: 7.8 (HIGH) with Local access, Low attack c...

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

PT-2026-70429

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description Improper link resolution before file access, also known as link following, in the Windows Accessibility Infrastructure ATBroker.exe allows an...

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate Android applications and execute complex multi-step tasks. To interpret user interfaces, these frameworks rely...

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-14304

In Eclipse Accessibility Tools Framework ACTF versions up to 1.6.0 including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0, it has been identified that an XML External Entity XXE vulnerability exists. If this vulnerability is exploited, a malicious...

EUVD-2026-53300

In Eclipse Accessibility Tools Framework ACTF versions up to 1.6.0 including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0, it has been identified that an XML External Entity XXE vulnerability exists. If this vulnerability is exploited, a malicious...

CVE-2026-14304

The CVE describes an XML External Entity (XXE) vulnerability in Eclipse ACTF up to version 1.6.0 (including ACTF-based miChecker up to 3.1.0). The underlying issue allows an attacker to access local or internal network resources via applications that use Eclipse ACTF (e.g., miChecker). Affected c...

The vulnerability of the Accessibility component in Google Chrome allows a perpetrator to execute arbitrary code.

The vulnerability of the Accessibility component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Chromium: CVE-2026-17713 Insufficient validation of untrusted input in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the fastrpc_init_create_static_process() function in the drivers/misc/fastrpc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpcinitcreatestaticprocess function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

CVE-2026-17713

An insufficient validation of untrusted input flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520572766...

DEBIAN-CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...