CVE-2026-2802

Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

CVE-2026-2797 Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

CVE-2026-2797

CVE-2026-2797 is a use-after-free in the JavaScript: GC component affecting Firefox and Thunderbird. The issue was fixed in Firefox 148 and Thunderbird 148. Public exploits are noted in some sources; CVSS metrics indicate a high-severity, memory-safety class vulnerability with network attack vect...

CVE-2026-2797

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 148 and Thunderbird 148...

CVE-2026-2795

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 148 and Thunderbird 148...

CVE-2026-2795

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

CVE-2026-2795

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

CVE-2026-2758

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

CVE-2026-2758

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

CVE-2026-2758

CVE-2026-2758 is a memory-safety use-after-free in the Mozilla Firefox JavaScript GC component. Public details show it affects Firefox and Thunderbird families and was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Multiple connected advisorie...

PT-2026-21735

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A race condition exists in the JavaScript: GC component. A race condition occurs when multiple threads access and manipulate shared data concurrently, leading to...

Mozilla Firefox和Mozilla Thunderbird 资源管理错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

Mozilla Firefox和Mozilla Thunderbird 资源管理错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector

Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 7.1.0 Vulnerability Details CVEID:CVE-2025-12194 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-agent-0.2.3-6.fc42

Event collector agent for crypto-auditing project...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: memcached-exporter, gogatekeeper, helm-mapkubeapis, terragrunt, fulcio, wuzz, grafana-mimir, skaffold, doppler-kubernetes-operator, crossplane-provider-aws-cloudformation, yace, fluxcd-kustomize-mutating-webhook, nats-server, dbmate, spicedb-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: memcached-exporter, gogatekeeper, helm-mapkubeapis, licenseclassifier, minify, terragrunt, fulcio, wuzz, grafana-mimir, skaffold, doppler-kubernetes-operator, crossplane-provider-aws-cloudformation, yace, fluxcd-kustomize-mutating-webhook, nats-server, dbmate,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: request-1279, vault-secrets-webhook, amazon-vpc-cni-plugins, boringssl-fips-static, docker-credential-acr-env, qemu-guesthelper, prometheus-alertmanager, terragrunt-fips, cyberark-secrets-provider-for-k8s, spiffe-helper-fips, aws-load-balancer-controller-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: request-1279, vault-secrets-webhook, amazon-vpc-cni-plugins, boringssl-fips-static, docker-credential-acr-env, qemu-guesthelper, prometheus-alertmanager, terragrunt-fips, cyberark-secrets-provider-for-k8s, spiffe-helper-fips, aws-load-balancer-controller-fips,...