GHSA-3JCW-33FG-2HGV vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-H34P-XGVR-MFG3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-6W89-9JRV-4J59 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-X5WW-48C3-RP9J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7JV8-R36R-863G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6J37-MH6C-P74W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6M3V-59WP-4J9Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V6J9-JH3Q-JQQ6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-43CM-8P8Q-H9J3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G538-2VJJ-8JX9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GQ66-W869-W9PW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-71222

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

OPENSUSE-SU-2026:21737-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to int32t multiplication overflow in unpacksampletable when decoding a crafted deep tiled EXR file bsc1276428. - CVE-2026-59184: out-of-bounds or use-after-free writes when processing...

EUVD-2026-69708

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

UBUNTU-CVE-2026-84640

A maliciously constructed mail header could lead to a one byte read pa...

CVE-2026-84118

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84125

A use-after-free vulnerability in the DOM: Core & HTML component of Firefox could allow a remote attacker to execute arbitrary code , according to Red Hat's assessment. The CVSS 3.1 score is 5.4 (Medium) with a network attack vector, low complexity, no required privileges, but user interaction re...

ASB-A-522376080

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...