CVE-2026-91749

An use after free flaw was found in the Workers component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558456602...

CVE-2026-92032

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

firefox: Sandbox escape due to use-after-free in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

firefox: Sandbox escape due to use-after-free in the DOM: Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

CVE-2026-92071

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component...

CVE-2026-92066

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...

CVE-2026-92064

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component...

CVE-2026-92065

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component...

CVE-2026-92045

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the WebRTC component...

CVE-2026-25280

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

CVE-2026-92048

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component...

CVE-2026-92050

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to race condition in the XPConnect component...

CVE-2026-92035

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics component...

EUVD-2026-81327

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

CVE-2026-25280 Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

CVE-2026-25280

CVE-2026-25280 is an out-of-bounds write (memory corruption) in the Qualcomm DSP Service , triggered by the escape handling flow when insufficient user buffer sizes are present. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector , low privileges required, and no u...

CVE-2026-25280 Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

EUVD-2026-81287

n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then invoked git with that path as its working directory; git walked up to the enclosing repository's top level and resolv...