PT-2026-126344

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptions. Attackers with the smw-schemaedit permission can save HTML that is passed unescaped to Html::rawElement in...

PT-2026-126464

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126512

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126534

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126519

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from a...

PT-2026-126466

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the DOM: HTML Parser...

PT-2026-125901

Stored cross-site scripting XSS in BloX widgets. The /api/dashboards//widgets/ API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could compromise the confidentiality of the information...

Semantic MediaWiki cross-site scripting vulnerability

Versions 3.0.0 through 7.3.1 of Semantic MediaWiki contain a cross-site scripting vulnerability. This stems from a stored XSS issue, allowing users with page editing privileges to inject HTML via Keyword-type attribute values that are not escaped when rendered on Special:Browse. Attackers can...

CKEditor Ecosystem CKEditor 5 Cross-site Scripting Vulnerability

The CKEditor ecosystem contains a cross-site scripting vulnerability in versions 29.0.0 through 47.7.4 and 48.0.0 through 48.5.1 of CKEditor 5. This vulnerability arises when General HTML Support is enabled and object content is permitted; specially crafted tags can trigger cross-site scripting,...

PT-2026-127220

Name of the Vulnerable Software and Affected Versions CKEditor 5 versions 29.0.0 through 47.7.3 CKEditor 5 versions 48.0.0 through 48.5.0 Description Specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and configured to allow object content. Processing...

PT-2026-126595

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

PT-2026-126598

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

Google Chrome Vulnerability: CVE-2026-118317

Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Turbolev; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code outside the sandbox...

PT-2026-126526

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126503

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the DOM: HTML Parser component. Use-after-free is a memory...

PT-2026-126508

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126523

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTML component. A use-after-free occurs...

PT-2026-126533

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird version prior to 153.6 Description Incorrect boundary conditions exist within the DOM: Core &...