Security Vulnerabilities fixed in Firefox ESR 115.42 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

PT-2026-102545

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Undefined behavior exists within the DOM: Streams...

Security Vulnerabilities fixed in Firefox ESR 140.17 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

QUIC Unvalidated Amplification Credit may be Over Accounted

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

mcp-attack-detection-sentinel

MCP 공격 탐지 — Sentinel 연구소 MCPModel Context Protocol 공격 패턴 에 대한 Sentinel 탐지 연구: MCP 관련 이벤트 이후의 비정상적인 ID 액세스, 도구 정의 변조, 리소스 간 액세스, 그리고 가능한 사후 악용Post-Exploitation 동작. 이 규칙들은 OWASP 에이전틱 애플리케이션 Top 10 2026에 매핑됩니다. 게시 상태: 이 저장소에는 현재 게시된 Nine Lives 동반 기사가 없으며, 웹사이트의 Labs 카탈로그에도 의도적으로 등재되지 않았습니다. 독립적인 연구...

Incorrect Behavior Order

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Incorrect Behavior Order via the isLinkLocal method, which incorrectly compared only the first 64 bits of an IPv6 address against the fixed patte...

Incorrect Behavior Order

Overview org.webjars.npm:ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Incorrect Behavior Order via the isLinkLocal method, which incorrectly compared only the first 64 bits of an IPv6 address against...

kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 systems. This issue arises when the system's Memory Management Unit MMU is inactive, causing an internal calculation for memory translation buffers TLB to misinterpret a negative value. This leads to an incorrect...

CVE-2026-101900

Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A separate same-process prototype-pollution flaw supplies an array or non-plain class...

gemini-2.5-pro-nf-tables-red-teamin

gemini-2.5-pro-nf-tables-red-teamin Google Gemini 2.5 Pro의 안전 정렬 정책, 가드레일, 그리고 레거시 Linux 커널 취약점 프리미티브CVE-2023-32233와 관련된 거부 동작 변화를 기록한 기술 사례 연구 및 타임라인 데이터셋입니다. 사례 연구 웹사이트 링크 : https://destawell.github.io/gemini-2.5-pro-nf-tables-red-teamin/...

CVE-2026-84895: Undefined Security Weakness

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

CVE-2026-88776

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable...

CVE-2026-88777

A memory overflow vulnerability exists in Citrix NetScaler ADC and Citrix NetScaler Gateway , leading to unpredictable behavior or a Denial of Service (DoS) . The flaw specifically impacts configurations as an LB/CS or CGNAT-LSN/NAT64 device where a non-HTTP Layer 7 protocol (such as FTP , RTSP ,...

CVE-2026-88776

A memory overflow vulnerability exists in Citrix NetScaler ADC and Citrix NetScaler Gateway affecting the Oracle type load balancing virtual server configuration. This flaw can lead to unpredictable or erroneous behavior or a Denial of Service (DoS) . The vulnerability is applicable to the follow...

EUVD-2026-87971

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable...

CVE-2026-88776 Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable...

CVE-2026-88775

CVE-2026-88775 is a memory overflow vulnerability affecting Citrix NetScaler ADC and Citrix NetScaler Gateway . The flaw leads to unpredictable behavior or a Denial of Service (DoS) . It specifically impacts systems configured as a Gateway (including SSL VPN, ICA Proxy, CVPN, and RDP Proxy) or as...

CVE-2026-88775 Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability...

CVE-2026-88775 Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability...

EUVD-2026-87962

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability...