Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...

Security Vulnerabilities fixed in Firefox 158 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

PT-2026-112903

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition exists in the Windows Graphics Kernel. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-111451

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 115.43 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An integer overflow exists within the Graphics component. ...

CVE-2026-96118: Out-of-bounds Read

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85338: Out-of-bounds Read

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

PT-2026-112438

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use after free issue in the Windows Graphics Kernel allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At...

CVE-2026-88110: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83582: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-100215: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

PT-2026-111919

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

Microsoft Windows: CVE-2026-96118: Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-102194: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83582: Windows Graphics Kernel Information Disclosure Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...

CVE-2026-85881: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

PT-2026-111905

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition exists in the Windows Graphics Kernel. This allows an authorized attacker to elevate privileges locally, potentially granting them higher-level acce...

PT-2026-116203

Уязвимость компонента Graphics Component операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

PT-2026-111890

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code locally or remotely, which can affect the syste...