MGASA-2026-0523 Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

MGASA-2026-0522 Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...

Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

CVE-2026-86961

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86949

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86948

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

CVE-2026-109440

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attacke...

CVE-2026-109441

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

EUVD-2026-104734

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86961

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86961

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86961

A race condition in Apple software allows a malicious application to potentially break out of its sandbox . The underlying cause is a lack of proper synchronization, which has been addressed with additional validation. This vulnerability affects iOS , iPadOS , and macOS (specifically macOS Golden...

CVE-2026-86949

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86949

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

EUVD-2026-104729

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox...

CVE-2026-86949

A security vulnerability in Xcode (specifically the Xcode component on macOS Tahoe 26.6 and later) allows a malicious app to break out of its sandbox . The root cause involves a lack of library validation on affected binaries. This issue has been addressed by enforcing library validation on the a...

CVE-2026-86948

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

CVE-2026-86948

Versions of Apple Xcode prior to Xcode 27 are vulnerable to a security flaw where a malicious application may be able to break out of its sandbox . The root cause is a lack of forced library verification on affected binary files. This issue was addressed by enforcing library validation. Remediati...

EUVD-2026-104728

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox...

EUVD-2026-104681

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...