UBUNTU-CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerabi...

UBUNTU-CVE-2026-16349

Same-origin policy bypass in the DOM: Navigation component. This vulne...

UBUNTU-CVE-2026-16372

Privilege escalation in the DOM: Content Processes component. This vul...

UBUNTU-CVE-2026-16371

Privilege escalation in the DOM: Navigation component. This vulnerabil...

UBUNTU-CVE-2026-16388

Sandbox escape in the DOM: Networking component. This vulnerability wa...

UBUNTU-CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulner...

glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

A flaw was found in glibc GNU C Library. The deprecated functions nsprintrrf, nsprintrr, and fpnquery do not properly validate the length of RDATA Resource Record Data in a DNS Domain Name System response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could...

DEBIAN-CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

DEBIAN-CVE-2024-5300

An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...

DEBIAN-CVE-2026-16390

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

DEBIAN-CVE-2026-16374

Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

DEBIAN-CVE-2026-16360

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox...

DEBIAN-CVE-2026-16354

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-59844 Libssh: libssh: denial of service via oversized sftp read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

UBUNTU-CVE-2026-64137

In the Linux kernel, the following vulnerability has been resolved: s...

UBUNTU-CVE-2026-63976

In the Linux kernel, the following vulnerability has been resolved: B...

UBUNTU-CVE-2026-63843

In the Linux kernel, the following vulnerability has been resolved: d...

UBUNTU-CVE-2026-63992

In the Linux kernel, the following vulnerability has been resolved: t...

UBUNTU-CVE-2026-63888

In the Linux kernel, the following vulnerability has been resolved: s...

UBUNTU-CVE-2026-64102

In the Linux kernel, the following vulnerability has been resolved: R...