EUVD-2026-104659

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips...

CVE-2026-113868

When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...

CVE-2026-113868

When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...

EUVD-2026-105295

When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...

CVE-2026-93232

A flaw was found in the Linux kernel's HugeTLB huge page memory management subsystem. During system startup, an uninitialized memory dereference occurs when HugeTLB Vmemmap Optimization HVO is enabled on a kernel compiled with virtual memory debugging options. A local user able to configure or...

CVE-2026-90034

A flaw was found in the Linux kernel's USB MDC800 driver. The driver uses kmalloc instead of kzalloc for buffer allocation, which can leave portions of the allocated memory uninitialized. If a shorter message is received, an attacker could potentially read sensitive information from the kernel...

CVE-2026-113400

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

EUVD-2026-104981

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113400 Uninitialized memory in the Audio/Video: cubeb component

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113400

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113400

The Firefox web browser is affected by a vulnerability involving uninitialized memory within the Audio/Video: cubeb component. This flaw is classified as CWE-457 (Use of Uninitialized Variable) . The issue has been remediated in Firefox 158.0.1 . No specific exploit details or in-the-wild exploit...

CVE-2026-113400 Uninitialized memory in the Audio/Video: cubeb component

Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization CMDQV device has a pending error during a kernel restart kexec, the interrupt handle...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53225)

"In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header, then calls af-fromaddrparam, which reads the full address ...

Linux Distros Unpatched Vulnerability : CVE-2026-112897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of...

Mozilla Firefox < 158.0.1

The version of Firefox installed on the remote Windows host is prior to 158.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-111 advisory. - Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1. CVE-2026-113401 -...

Mozilla Firefox < 158.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 158.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-111 advisory. - Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1...

PT-2026-118620

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.5.1 Thunderbird versions prior to 158.0.1 Description When authenticating to a POP3 or SMTP server using NTLM, the application fails to verify if the server challenge is valid base64. A malicious server can se...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the decodeStrip and decodeTile functions in src/libImaging/TiffDecode.c, where the TIFF strip and tile decode buffers are reallocated without zeroing the region beyond previously decoded data. When a codec such as...

CVE-2026-112898

A flaw was found in Pillow. When processing an image with an empty palette during color quantization, internal stack memory is left uninitialized and emitted into the output image data. An attacker who supplies a crafted palette image can exploit this vulnerability to read uninitialized memory...