CVE-2026-43670

Apple Safari contains a Content Security Policy (CSP) bypass caused by insufficient enforcement in AudioWorklet contexts . Processing maliciously crafted web content may allow an attacker to bypass CSP restrictions. The issue is fixed in Safari 26.5 , iOS 18.7.9 / iPadOS 18.7.9 , iOS 26.5 / iPadO...

ROS-20230420-03

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries when checking the number of available bytes of regulated threads. operation exceeds buffer boundaries in memory when checking the number of available...