CVE-2026-21577

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource...

CVE-2026-21579

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.2, allows an unauthenticated attacker to vi...

EUVD-2026-46250

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46245

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46236

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46227

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

EUVD-2026-46223

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...

EUVD-2026-46252

Memory safety bugs present in Firefox ESR 115.37 and Firefox ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38 and Firefox ESR...

EUVD-2026-46205

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

SUSE CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CVE-2026-16403

CVE-2026-16403 describes a spoofing vulnerability in the Firefox Address Bar component. The issue affects the Address Bar rendering logic and is fixed in Firefox 153. The provided documents do not include exploit details or attack scenarios. Remediation: upgrade to Firefox 153 or later per the fi...

CVE-2026-16399

The CVE-2026-16399 entry relates to a site isolation issue in the DOM: Navigation component of Firefox, with a fix implemented in Firefox 153. Affected product is Firefox; root cause described as a site isolation issue in the DOM navigation path. The connected documents confirm the vulnerability ...

CVE-2026-16393

CVE-2026-16393 concerns the Graphics: WebGPU component in Firefox, due to incorrect boundary conditions. Affected software is Firefox with the Graphics: WebGPU implementation; the issue was fixed in Firefox 153. See references to Bug 2045410 and MFSA 2026-68 for details. No exploitation details o...

CVE-2026-16386

CVE-2026-16386 affects the Graphics: WebGPU component. The issue is information disclosure caused by uninitialized memory. Mozilla advisories indicate the vulnerability was fixed in Firefox 153. No exploit details are provided in the supplied documents; remediation is the Firefox 153 update. Moni...

CVE-2026-16375

CVE-2026-16375 affects the Networking: HTTP component in Firefox. The issue is described as a site isolation problem that was fixed in Firefox 153 and Firefox ESR 140.13. The available documents do not provide additional technical specifics (e.g., exact vulnerable function, root cause, affected s...

CVE-2026-16374

The CVE-2026-16374 entry pertains to Mozilla Firefox, describing an information disclosure vulnerability in the DevTools Framework component. The root cause details are not disclosed in the provided documents, but the issue is stated as fixed in Firefox 153 and Firefox ESR 140.13. Impact is limit...

CVE-2026-16350

Vulnerability in the Audio/Video: cubeb component via incorrect boundary conditions. Affected product: Firefox browser (including Firefox 153) and Firefox ESR (115.38 and 140.13). Root cause: improper handling at boundary conditions in cubeb. Impact details are not elaborated beyond the fix; expl...

CVE-2026-64627

Parse Server versions = 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. When the GraphQL API is mounted with public introspection disabled graphQLPublicIntrospection: false, the default, schema-derived 'Did you mean ...?' suggestions were still...

CVE-2026-16461

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

ROOT-APP-PYPI-CVE-2024-34064 CVE-2024-34064 in rootio-Jinja2 - Patched by Root

Root has patched CVE-2024-34064 in the rootio-Jinja2 package for Root:PyPI. Multiple fixed versions available...