61721 matches found
firefox: Use-after-free in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
firefox: Sandbox escape due to use-after-free in the DOM: Security component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...
firefox: thunderbird: Privilege escalation in the DOM: Workers component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...
firefox: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: Use-after-free in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
CVE-2026-92046
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component...
PT-2026-94619
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the arm mpam module when a user unbinds a Memory System Component MSC after an error interrupt has triggered the mpam disable function. This happens...
PT-2026-94751
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtlwifi PCI component where the rtl pci probe function contains an incorrect goto label in its final error path. This causes the system to skip necessary cleanup...
PT-2026-95125
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description An information leak exists in the Permissions component that allows a remote attacker to leak cross-origin data by using a crafted HTML page. Cross-origin data leakage occurs when a...
PT-2026-94868
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ipu6 media component. The function ipu6 bus initialize device stores the isys/psys pdata pointer in struct ipu6 bus device and initializes the auxiliary...
PT-2026-94954
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...
CVE-2026-61597
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tags "djust.components.templatetags." render a developer/user-supplied URL into an "href" / "action" attribute, HTML-escapi...
CVE-2026-92023
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XML component...
CVE-2026-82561
Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...
CVE-2026-92014
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics component...
Security Bulletin: Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294
Summary Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294. This security bulletin provides details about the vulnerability and...
DEBIAN-CVE-2026-89944
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
CVE-2026-89944 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdachda: Fix hlink refcount leak on component registration failure hdachdadevprobe gets the HDA link with sndhdacextbuslinkget before registering the ASoC component. If component registration fails, the function returns...
