Linux Distros Unpatched Vulnerability : CVE-2026-100756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,...

Mozilla Thunderbird < 140.17

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-102 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1740649075)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1740649075 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock source...

Mozilla Thunderbird < 153.4

The version of Thunderbird installed on the remote Windows host is prior to 153.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-103 advisory. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firef...

CentOS Linux 8.5 [TuxCare] Security Update: kernel-cross-headers / kernel-debug-modules-extra / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1747688831)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1747688831 advisory. - An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785839724)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785839724 advisory. - The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an...

CentOS Linux 7 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1747260502)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1747260502 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of- bound accesses for Extigy a...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird (ALMALINUX9.2:CLSA-2026:1781079925)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781079925 advisory. - Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1,...

SUSE CVE-2026-100756

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

SUSE CVE-2026-100783

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

SUSE CVE-2026-100805

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-97929

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...

CVE-2026-97910

A flaw was found in the Linux kernel. The Spreadtrum audio driver fails to validate buffer size parameters against fixed physical memory allocations during compressed audio stream operations. A local attacker with access to the audio device can supply oversized buffer configurations to trigger an...

CVE-2026-97909

A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request IRQ before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains...

CVE-2026-90914

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

EUVD-2026-89083

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

CVE-2026-100805

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

DEBIAN-CVE-2026-100783

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100783

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

DEBIAN-CVE-2026-100756

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...