firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

PT-2026-112652

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An authorized attacker can execute arbitrary code over a network due to the release of an invalid pointer or reference. This issue allows remote attackers to affect the system...

PT-2026-112742

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An authorized attacker can elevate privileges locally due to the release of an invalid pointer or reference within the Windows Management Instrumentation component...

CVE-2026-109774: Undefined Security Weakness

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

Microsoft Windows: CVE-2026-83735: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83735: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85850: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85850: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83908: RPC Runtime Elevation of Privilege Vulnerability

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-85362: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-83889: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83889: Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-108133: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

PT-2026-112012

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description An issue exists where the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allo...

PT-2026-111494

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An invalid pointer in the DOM Notifications component leads to undefined behavior. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...

Microsoft Windows: CVE-2026-85362: Windows Management Instrumentation Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

MiracleLinux 9 : perl-DBI-1.643-9.el9_8.7 (AXSA:2026-2031:07)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2031:07 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description bloc...

PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback

A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service...

pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching

A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF Unicode Transformation Format characters. This could lead...

PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback

A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service...