Lucene search
+L

18515 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58735

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.125 Description A use after free issue in the GPU component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achiev...

8.3CVSS6.1AI score0.00483EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.125 Description A use after free issue in the Core component allows a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use after free occurs...

9.6CVSS5.7AI score0.00295EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-58732

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 150.0.7871.125 Description Insufficient validation of untrusted input in the Linux Toolkit Theming component allows a remote attacker who has already compromised the renderer process to potentially...

8.8CVSS5.4AI score0.00346EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.7 views

RHEL 8 : thunderbird (RHSA-2026:39141)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39141 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape in the DOM: Workers...

9.6CVSS6.2AI score0.00493EPSS
SaveExploits0References60
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.4 views

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:2852-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2852-1 advisory. This update for MozillaThunderbird fixes the following issues Update to Firefox 140.12.0 ESR MFSA 2026-58,...

9.6CVSS6.2AI score0.00493EPSS
SaveExploits0References60
Mageia
Mageia
added 2026/07/13 9:24 p.m.9 views

Updated thunderbird thunderbird-l10n packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. CVE-2026-12289 Memory safety bug fixed in Thunderbird ESR 140.12. CVE-2026-12290 Use-after-free in the Networking: HTTP component. CVE-2026-12291 Incorrect boundary conditions in the Web...

9.6CVSS6.1AI score0.00493EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/13 9:24 p.m.8 views

MGASA-2026-0242 Updated firefox, firefox-l10n, rootcerts, nss packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. CVE-2026-12289 Memory safety bug fixed in Firefox ESR 140.12. CVE-2026-12290 Use-after-free in the Networking: HTTP component. CVE-2026-12291 Incorrect boundary conditions in the Web Audi...

9.6CVSS6.1AI score0.00493EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.6 views

firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure, sandbox escape in the Security: Process Sandboxing component...

4.7CVSS6AI score0.00185EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.7 views

firefox: thunderbird: Sandbox escape in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Workers component...

9.6CVSS6AI score0.00363EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.8 views

firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure, sandbox escape in the Security: Process Sandboxing component...

4.7CVSS6AI score0.00175EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.9 views

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...

9.6CVSS6AI score0.00393EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.6 views

firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Security: Process Sandboxing component...

9.6CVSS6AI score0.00393EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.8 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.6CVSS6.1AI score0.00493EPSS
SaveExploits0References30
RedHat Linux
RedHat Linux
added 2026/07/13 5:2 p.m.6 views

firefox: thunderbird: Sandbox escape in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...

9.6CVSS6AI score0.00393EPSS
SaveExploits0References6
PyPA
PyPA
added 2026/07/13 3:46 p.m.16 views

WeasyPrint has CSS Injection via Presentational Hints

SummaryA CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing injection of arbitrary CSS declarations. This affects applications processing untrusted HTML input. DetailsFile: weasyprint/css/init.pyThe...

6.5CVSS6.2AI score
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/13 3:46 p.m.8 views

PYSEC-2026-2581 Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Advisory Details Title: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgent Description: Summary Langroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents...

10CVSS6.4AI score0.00638EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/13 3:46 p.m.5 views

PYSEC-2026-2480 Flawfinder output manipulation via untrusted filenames and source text

Impact This vulnerability is an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection: Terminal Output Spoofing: A malicious file whose name contains ANSI escape sequences can end up being included in flawfinder...

6.1AI score
SaveExploits0References5
OSV
OSV
added 2026/07/13 3:46 p.m.3 views

PYSEC-2026-2556 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

5.1CVSS6.1AI score0.00158EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:46 p.m.10 views

PYSEC-2026-3428 WsgiDAV encoded dot segments can escape filesystem share roots

Impact WsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the configured filesystem share root in a specific path layout. Patches The issue is fixed with version 4.3.4. Preconditions The practical impact depends on the deployment. The deployment...

7.1CVSS6.1AI score0.00072EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:19 p.m.4 views

PYSEC-2026-2424 compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

Summary The compliance-trestle library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher constructs the local cache file path from the URL path component without sanitizing path traversal sequences ../. When a remote OSCAL profile references a URL with traversal in its path, the HTTP...

7.1CVSS6.5AI score0.00047EPSS
SaveExploits0References7
Rows per page
Query Builder