firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...

firefox: thunderbird: Site isolation issue in the Networking: HTTP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: HTTP component...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...

CVE-2026-68303

A flaw was found in the Linux kernel's drm/vc4 drivers, specifically in the hvs and v3d components. When these drivers are being removed, they attempt to access memory that has already been freed. This occurs because they try to retrieve driver data from a master device that is no longer availabl...

CVE-2026-72781 Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

EUVD-2026-56105

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

CVE-2026-72781

CVE-2026-72781 affects Craft CMS versions 5.0.0-RC1–before 5.10.7 and 4.x RC1–before 4.18.3, where an authenticated control-panel user can trigger a remote code execution via the Twig sandbox escape. The vulnerability arises because Craft marks ElementInterface as safe (AllowedInSandbox) and the ...

CVE-2026-72781 Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

CVE-2026-72778 Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling. Craft cleanses the outer request-controlled condition array via Component::cleanseConfig, but...

CVE-2026-73151

A flaw was found in svxlink's remotetrx NetUplink component. An unvalidated audio length field enables an out-of-bounds read, and when AUTHKEY is not set, transceiver control functions are exposed to unauthenticated remote access. This allows unauthorized control of radio hardware connected to th...

CVE-2026-73149

A flaw was found in svxlink's NetRx component. An unvalidated MsgAudio length field allows a remote attacker to trigger an out-of-bounds read beyond buffer boundaries, potentially leading to information disclosure or a crash. Mitigation Update svxlink to version 26.05.1 or later...

CVE-2026-73143

A flaw was found in svxlink's RtlTcp component. A malformed rtltcp greeting from a remote source triggers an unconditional exit1 call, causing the entire svxlink daemon to terminate. A remote attacker can exploit this to achieve a complete denial of service of the repeater controller. Mitigation...

CGA-98WM-P8HW-RH39

Bulletin has no description...

MINI-CPG4-7PRG-HM8J

Bulletin has no description...

MINI-XJH9-2MG7-V4FH

Bulletin has no description...

MINI-RWC4-JWHQ-72W8

Bulletin has no description...

MINI-JJ7V-Q5WR-PF7J

Bulletin has no description...

CVE-2025-30238

creationtimestamp| type| source ---|---|--- 2026-08-11 00:19:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4scc4ve5wkbvr...

EUVD-2026-55876

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application...