Linux Distros Unpatched Vulnerability : CVE-2026-6750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150,...

Mozilla -- Information disclosure

https://bugzilla.mozilla.org/showbug.cgi?id=2022610 reports: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011173 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies cou...

Mozilla -- Privilege escalation

https://bugzilla.mozilla.org/showbug.cgi?id=2023407 reports: Privilege escalation in the Graphics: WebRender component...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010903 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011199 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010716 advisory. Null pointer reference in some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010846 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011105 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010750 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpumetricstable memory leak Memory is allocated for gpumetricstable i...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011090 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable...

CVE-2026-6750: Improper Privilege Management

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011249 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from...

Mozilla Thunderbird < 140.10

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-34 advisory. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox...

Mozilla -- Denial-of-service

https://bugzilla.mozilla.org/showbug.cgi?id=2015959 reports: Denial-of-service due to integer overflow in the Graphics: WebGPU component...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006999 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available when...

PT-2026-33935

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 150 Firefox ESR versions prior to 115.35 Firefox ESR versions prior to 140.10 Thunderbird versions prior to 150 Thunderbird versions prior to 140.10 Description Information disclosure occurs due to uninitialized memor...

SUSE CVE-2026-35512

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

CVE-2026-40321

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased ...