CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-82072

An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

vm2 v3.11.8

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation npm install vm2 Quick Examples import VM from...

Sandboxie v1.18.3

Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...

PT-2026-84560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the TabStrip component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-84561

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A buffer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved by...

Mozilla Firefox ESR < 153.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-85 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

Google Chrome < 152.0.7977.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop advisory. - Use after free in Shared Tab Groups in Google Chrome on on Android prior to...

Mozilla Thunderbird < 153.2

The version of Thunderbird installed on the remote Windows host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-88 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

Mozilla Firefox ESR < 115.40

The version of Firefox ESR installed on the remote Windows host is prior to 115.40. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-83 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbi...

CVE-2026-84119: Use After Free

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

PT-2026-84555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in Chromoting on Windows allows a local attacker to execute arbitrary code outside the sandbox through a local program. Recommendations Update Google Chrome to...

PT-2026-84562

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in WebGL, which occurs when a program continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary cod...

PT-2026-84559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue in the Browser component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved...

PT-2026-84557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in WebRTC, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use aft...

PT-2026-84545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the Proxy component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-84354

Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS affected versions not specified Description OpenAI Codex Desktop can execute attacker-controlled Git hooks due to automated Git operations trusting the repository local core.hooksPath setting. If a us...