Chromium: CVE-2026-78899 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79236

A flaw was found in Chromium. This type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-78938

A flaw was found in the V8 JavaScript engine used in Chromium-based browsers. This type confusion vulnerability allows a remote attacker to execute unauthorized code within the browser's security sandbox by tricking a user into visiting a specially crafted web page. This could lead to a compromis...

CVE-2026-78901

A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-76020

A race condition flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=541837151...

V8-sandbox-escape-PoC-

V8 Sandbox Escape PoC ⚠️ CRITICAL SECURITY WARNING ⚠️...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

Firefox Thunderbird DoS

The vulnerability of the JavaScript Engine component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox ESR DoS

The vulnerability of the JavaScript Engine component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox ESR DoS

The vulnerability of the JavaScript Engine component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox ESR DoS

The vulnerability of the JavaScript Engine component in Firefox ESR, Firefox, and the Thunderbird email client relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE CVE-2026-74976

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

SUSE CVE-2026-74984

Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74984

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the JavaScript Engine component...

GHSA-864F-RCV7-6RH4

creationtimestamp| type| source ---|---|--- 2026-08-20 16:00:51+00:00| seen| https://thehackernews.com/2026/08/isolated-vm-flaw-lets-sandboxed.html 2026-08-20 16:34:42+00:00| seen| https://bsky.app/profile/endorlabs.bsky.social/post/3mtjogb2gjk23 2026-08-21 01:00:35+00:00| seen|...

quickjs-ng: Multiple Vulnerabilities

Background quickjs-ng is a small and embeddable JavaScript engine. It aims to support the latest ECMAScript specification. It is a fork of QuickJS. Description Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Impact Pleas...

CVE-2026-74976

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

CVE-2026-76033

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:45:11+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...