Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Graphics: Text component...

CLEANSTART-2026-NJ21771 png_image_free in png

Multiple security vulnerabilities affect the libpng package. pngimagefree in png. See references for individual vulnerability details...

ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image...

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows operating systems. There is a resource management vulnerability in Microsoft Win32K-GRFX. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected:...

Amazon Linux 2 : libpng, --advisory ALAS2-2026-3244 (ALAS-2026-3244)

The version of libpng installed on the remote host is prior to 1.5.13-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3244 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface in the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows GDI...

PT-2026-32877

CVE-2026-33104 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileg… https://t.co/UuLyDyKlAd...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2026:1273-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1273-1 advisory. - Update to 149.0.2 and 140.9.1esr bsc1261663. - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1,...

Microsoft Graphics Component 安全漏洞

The Microsoft Graphics Component is a graphics driver component developed by Microsoft Corporation. There are security vulnerabilities present in the Microsoft Graphics Component. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Window...

PT-2026-32864

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the...

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface within the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows...

CVE-2026-32221: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

PT-2026-32792

🪟 CVE-2026-27930 is Microsoft basically rating its own certainty like a Netflix show: “trust us, it’s real.” Patch confidence ≠ patch comfort—GDI bugs love surprises. WindowsSecurity https://t.co/D22PcrqW3J WindowsSecurity PatchManagement GdiInformationDisclosure https://t.co/DAKvm6v2sr...

PT-2026-32793

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads dat...

PT-2026-46709

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in SVG allows a remote attacker to leak cross-origin data, which is information from a different origin than the one that initiated the request, by using...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service via out-of-bound...

ALSA-2026:8052 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service via out-of-bound...

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

JLSEC-2026-96

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...