EUVD-2026-33320

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC prior to 0.27.0 contains a stack and heap buffer overrun in do_key_value() (src/pkcs15init/profile.c). During pkcs15-init, a key value entry starting with '=' and exceeding the size of keybuf is copied via memcpy without length checking, causing memory corruption on both stack and heap. A ...

CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2025-41278

creationtimestamp| type| source ---|---|--- 2026-05-29 13:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyn33sjh32j...

CVE-2025-41267

creationtimestamp| type| source ---|---|--- 2026-05-29 12:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylnj34qv2e...

CVE-2025-41271

creationtimestamp| type| source ---|---|--- 2026-05-29 12:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylhohk3x2r...

CVE-2026-49196

creationtimestamp| type| source ---|---|--- 2026-05-29 11:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyh6rpkeo2i...

CVE-2026-8669

creationtimestamp| type| source ---|---|--- 2026-05-29 10:35:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmydnjivqs2r 2026-05-29 10:35:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmydngtxy22r...

CVE-2026-49212

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:47+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgyz6x62f...

CVE-2026-49216

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:44+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgupjrn2c...

CVE-2026-49215

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:39+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgqhaiq2p...

CVE-2026-49209

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:26+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgebayy2p...

CVE-2026-49208

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:21+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzg7aobq2u...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-41, MFSA 2026-48 bsc1265212, bsc1264378: CVE-2026-8090: Use-after-free in the DOM: Networking component. CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2,...

SUSE-SU-2026:2109-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-41, MFSA 2026-48 bsc1265212, bsc1264378: - CVE-2026-8090: Use-after-free in the DOM: Networking component. - CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2,...

Updated thunderbird(-l10n) packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...