CVE-2026-17528

CVE-2026-17528 affects the nice-select2 JavaScript plugin. Versions before 2.4.1 are vulnerable to XSS via the element, where a malicious payload is rendered into the DOM and can execute arbitrary scripts in a user’s browser when interacting with affected pages. The issue is tied to insufficient...

ALSA-2026:47101 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component...

CVE-2026-16407

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Service Workers component...

CVE-2026-16399

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Navigation component...

CVE-2026-16388

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Networking component...

CVE-2026-16382

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Service Workers component...

CVE-2026-16370

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

CVE-2026-16378

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the DOM: Copy & Paste and Drag & Drop component...

CVE-2026-16372

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...

PT-2026-64811

Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0 Description Cross-site scripting occurs when AI chat responses are rendered using markdown-it with the html:true configuration and injected into the DOM via dangerouslySetInnerHTML in the chat-preview component...

Linux Distros Unpatched Vulnerability : CVE-2026-16388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16388 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-16372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16372 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-16394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16394 Note that Nessus relies on the...

SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3221-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3221-1 advisory. This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR MFSA...

Linux Distros Unpatched Vulnerability : CVE-2026-16399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16399 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-65913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting...

Linux Distros Unpatched Vulnerability : CVE-2026-16382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16382 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-16400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16400 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-16370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16370 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-16366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16366 Note that Nessus relies o...