CVE-2026-109704: Improper Privilege Management

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

Oracle Linux 8 : kbd (ELSA-2026-78951)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-78951 advisory. 2.0.4-11.1 - Fix CVE-2026-72693: openvt -u process matching more conservative Resolves: RHEL-235979 Tenable has extracted the preceding description block...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical, high, and medium that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read,...

APSB26-152 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of...

Security Vulnerabilities fixed in Firefox 158 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote Windows host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR...

CVE-2026-109709: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109739: Improper Privilege Management

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109778: Improper Privilege Management

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1...

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8635-1)

"The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8635-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:4627-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4627-1 advisory. Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: - CVE-2026-92005:...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : attr vulnerability (USN-8691-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8691-1 advisory. It was discovered that attr incorrectly handled symbolic links while traversing directory...

PT-2026-113142

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use after free issue in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

CVE-2026-102216: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

PT-2026-112682

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...