Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100888 advisory. Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a syste...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099733 advisory. In the Linux kernel, the following vulnerability has been resolved: lib: cpurmap: Avoid use after free on rmap-obj array entries When calling irqsetaffinitynotifier...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099789 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099950 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100503 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101139 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148,...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

Unity Linux 20.1070a Security Update: libreoffice (UTSA-2026-099544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099544 advisory. LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101156 advisory. Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101277 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099776 advisory. In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100702 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6vti: fix incorrect tunnel matching in vti6tnllookup In vti6tnllookup, when an exact match for ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101165 advisory. Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Tenable ha...

CVE-2026-57260

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash...

EUVD-2026-42189

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash...

CVE-2026-57260

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash...

CVE-2026-57260 Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference)

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash...

CVE-2026-57260

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-57260 Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference)

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash...