CVE-2026-74968

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0965

Updates of 'nss' packages of Photon OS have been released...

ANT-2026-XKHM3P45 · nss · heap-use-after-free

use-after-free low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-XKHM3P45: Heap use-after-free in NSS DTLS client via crafted...

ANT-2026-1ZNMP148 · NSS · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-6772 GHSA-c2q7-642g-3vwr Severity Claude medium · Security research firm medium · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-1ZNMP148:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101350 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100958 advisory. Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100914 advisory. Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

[SECURITY] [DLA 4729-1] nss security update

Debian LTS Advisory DLA-4729-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof August 10, 2026 https://wiki.debian.org/LTS Package : nss Version : 3.61-1+deb11u7 2:3.87.1-1+deb12u4 CVE ID : CVE-2026-16389 Tomoya Nakanishi discovered a flaw in nss, the Mozilla...

Security Bulletin:Vulnerability in cifs-utils affects IBM Netezza Appliance

Summary The cifs-utils package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-12505 Vulnerability Details CVEID:CVE-2026-12505 DESCRIPTION: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root...

Photon OS 5.0: Nss PHSA-2024-5.0-92-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-91-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-91-0342

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0342. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2023-5.0-91-0014

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-92-0342

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0342. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2023-5.0-92-0014

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-92-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-91-0234

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0234. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2026-5.0-91-0801

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0801. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2026-5.0-92-0801

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0801. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-68744

CVE-2026-68744 concerns the SSSD NSS responder. The function sss_nss_protocol_fill_initgr() pre-allocates reply space for all groups but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be sent to the client. This enables a local attacker to disclose cached ...

CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...