CVE-2026-48725

Warp exposes a vulnerability where terminal output can request access to the local clipboard via OSC 52. From build 0.2021.04.25.23.05.stable_00 up to 0.2026.05.06.15.42.stable_01, a malicious remote host or attacker-controlled terminal output source could trigger reads or writes to the user’s cl...

MINI-9VRC-RX55-HCCX

Bulletin has no description...

MINI-4PHM-RW55-PVJX

Bulletin has no description...

MINI-RV7F-52HP-67MM

Bulletin has no description...

MINI-2P8C-V54C-JGC5

Bulletin has no description...

MINI-7C55-RFQ8-C3G3

Bulletin has no description...

symfony/ux-live-component: Denial of service via unbounded batch action requests

Description Symfony\UX\LiveComponent\Controller\BatchActionController::invoke iterates over the client-supplied actions array and issues a full HttpKernel sub-request for each entry event subscribers, validators, Doctrine, rendering. The array size is never bounded, so an authenticated client can...

MINI-2XCP-54RW-HM93

Bulletin has no description...

[SECURITY] Fedora 44 Update: firefox-152.0-1.fc44

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Compute-Budgeted Exploitability Evidence Graphs for Prospective Vulnerability Triage

Defenders cannot patch every newly disclosed vulnerability at once, so exploitability prediction must be evaluated prospectively rather than retrospectively. We study compute-budgeted vulnerability triage in which each CVE is scored only from public evidence visible by a fixed decision time...

MINI-52XR-MHPW-8855

Bulletin has no description...

EUVD-2026-37098

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12295

A sandbox escape vulnerability exists in the DOM: Navigation component of the Mozilla Firefox and Thunderbird applications. This flaw allows an attacker to bypass sandbox restrictions, potentially leading to significant impact on the host system. The vulnerability has been addressed in Firefox 15...

CVE-2026-12289

The Graphics: WebRender component in Mozilla Firefox and Mozilla Thunderbird is susceptible to a privilege escalation vulnerability. This flaw allows attackers to gain elevated privileges on a system. The issue has been addressed in several releases, including Firefox 152 , Firefox ESR 140.12 , F...

PT-2026-49682

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description An information disclosure and sandbox escape issue exists within the Security: Process...

MINI-5V9M-RF59-CMC4

Bulletin has no description...

CVE-2026-11651 vulnerabilities

Vulnerabilities for packages: chromium...

VulnCheck KEV: CVE-2020-6286

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...

CVE-2026-53463 ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25...

CVE-2026-53460 ImageMagick: Policy Bypass can trigger out-of-Memory condition

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 a...