CVE-2026-100820 Privilege escalation in the Address Bar component

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100820 Privilege escalation in the Address Bar component

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

EUVD-2026-88799

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100820

A privilege escalation vulnerability exists in the Address Bar component of the Firefox web browser. This flaw allows for elevated privileges during use. The issue has been addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . No specific exploit details or in-the-wild exploitat...

CVE-2026-100820

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CLSA-2026-1790677530 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 7.1.0-tuxcare.2...

CLSA-2026-1790676837 TuxCare security update for ip-address (1 CVE)

TuxCare rebuilt ip-address to address 1 CVE. Fixed in 6.4.0-tuxcare.4...

CVE-2026-97571

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. The driver does not properly handle memory allocation failures when configuring Transparent Packet Aggregation TPA buffers, leaving partially initialized ring buffers active. When memory allocation fails, an...

CLEANSTART-2026-AQ64279 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-JM61604 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-VL04075 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

PT-2026-102895

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download file and scrape web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata...

CVE-2026-102264: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

PT-2026-102845

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description A UI misrepresentation in the Omnibox allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update to version 154.0.8037.92 or later...

CVE-2026-102312: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-101912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95279): chromium -- security fixes

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

PT-2026-102594

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description Privilege escalation exists within the Address Bar component. Recommendations Update Firefox t...

Linux Distros Unpatched Vulnerability : CVE-2026-101910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in...

Amazon Linux 2 : rclone (ALAS-2026-3947)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3947 advisory. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the...