Mozilla Thunderbird < 153.1

The version of Thunderbird installed on the remote Windows host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-80 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these...

Mozilla Thunderbird < 140.14

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-79 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Som...

Linux Distros Unpatched Vulnerability : CVE-2026-74949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR...

UBUNTU-CVE-2026-74969

Use-after-free in the Layout: Text and Fonts component. This vulnerabi...

CVE-2026-74936

Use-after-free in the JavaScript: WebAssembly component. This vulnerab...

UBUNTU-CVE-2026-74944

Use-after-free in the DOM: Core & HTML component. This vulnerability w...

UBUNTU-CVE-2026-74943

Use-after-free in the Graphics: ImageLib component. This vulnerability...

Oracle Linux 8 : pam (ELSA-2026-56131)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56131 advisory. 1.3.1-40.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-40 - pamuserdb: fix password comparison timing leak. Resolves:...

MiracleLinux 9 : kernel-5.14.0-687.23.1.el9_8 (AXSA:2026-1569:64)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1569:64 advisory. kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43074 kernel: eventpoll: fix epremove struct eventpoll / struct file UAF...

Linux Distros Unpatched Vulnerability : CVE-2026-74936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...

Linux Distros Unpatched Vulnerability : CVE-2026-74943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,...

Mozilla Thunderbird < 140.14

The version of Thunderbird installed on the remote Windows host is prior to 140.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-79 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these...

Linux Distros Unpatched Vulnerability : CVE-2026-56684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while...

Oracle Linux 10 : kernel (ELSA-2026-38492)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38492 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Linux Distros Unpatched Vulnerability : CVE-2026-76045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-72337

A flaw was found in the Linux kernel's Bluetooth 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks component. This vulnerability occurs due to a race condition during the module's exit process, where a scheduled task attempts to access memory that has already been released. A local...

CVE-2026-72336

A flaw was found in the Linux kernel's Bluetooth 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks component. A race condition exists where an L2CAP Logical Link Control and Adaptation Protocol connection is accessed after its protection is dropped, allowing it to be deallocated...

CVE-2026-72335

A flaw was found in the Linux kernel's Bluetooth Management MGMT component. A use-after-free vulnerability exists in the advertisement monitor add failure cleanup process. This occurs because an advertisement monitor object is prematurely freed while a subsequent management routine attempts to...

CVE-2026-72329

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

CVE-2026-72328

A flaw was found in the Linux kernel's accel/amdxdna component. A race condition exists where the aie2populaterange function can attempt to use an amdxdnaumap object that is simultaneously being released. This concurrent access may lead to a use-after-free vulnerability, which could result in...