5361 matches found
CVE-2026-76236 stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
OPENSUSE-SU-2026:21594-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component...
CVE-2026-76033
A flaw was found in Google Chrome's handling of Cross-Origin Resource Sharing CORS. A remote attacker, who has already compromised the browser's renderer process, could exploit this vulnerability by using a specially crafted HTML page. This could allow the attacker to bypass site isolation, a...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
UBUNTU-CVE-2026-74986
Site isolation issue in the CSS Parsing and Computation component. Thi...
UBUNTU-CVE-2026-74934
Site isolation issue in the Graphics: CanvasWebGL component. This vuln...
UBUNTU-CVE-2026-74981
Site isolation issue in the Audio/Video: Web Codecs component. This vu...
CVE-2026-74960
Site isolation issue in the WebExtensions component. This vulnerabilit...
Mozilla Thunderbird < 154.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-78 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and...
UBUNTU-CVE-2026-74970
Site isolation issue in the Graphics component. This vulnerability was...
Mozilla Thunderbird < 153.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-80 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some...
Mozilla Thunderbird < 140.14
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-79 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Som...
UBUNTU-CVE-2026-74962
Site isolation issue in the Networking: Cookies component. This vulner...
CVE-2026-74981
Site isolation issue in the Audio/Video: Web Codecs component. This vu...
UBUNTU-CVE-2026-74968
Site isolation issue in the Graphics: WebRender component. This vulner...
CVE-2026-74962
Site isolation issue in the Networking: Cookies component. This vulner...
Linux Distros Unpatched Vulnerability : CVE-2026-74934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR...
Mozilla Thunderbird < 153.1
The version of Thunderbird installed on the remote Windows host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-80 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these...
Linux Distros Unpatched Vulnerability : CVE-2026-74981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird...