CVE-2026-16370 Mitigation bypass in the DOM: Networking component

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46206

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153...

CVE-2026-16370

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16366

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16366 Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16366 Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46197

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46196

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46192

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16351

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16349 Same-origin policy bypass in the DOM: Navigation component

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

MINI-3PVV-7X54-P49V

Bulletin has no description...

EUVD-2026-46144

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

CVE-2026-63729

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

MINI-QVFC-2C42-H35H

Bulletin has no description...

MINI-V38C-FFR9-6V44

Bulletin has no description...

PT-2026-62190

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Document Management and Collaboration versions 12.2.3 through 12.2.15 Description A flaw in the Attachments component allows a low privileged attacker with network access via HTTP to compromise the system. This c...

CVE-2026-30633

The software knowns-dev/knowns version 0.11.4 contains a directory traversal vulnerability. The flaw is triggered by providing a crafted path value to the get_doc and update_doc tools. This vulnerability allows for an improper limitation of a pathname to a restricted directory. No specific remedi...

CVE-2026-61191: Improper Access Control

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Document Management. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile...

CVE-2026-61271: Improper Access Control

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...