Linux Distros Unpatched Vulnerability : CVE-2026-72103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 md: port block device access to file accidentally...

Security Vulnerabilities fixed in Firefox ESR 153.1 — Mozilla

Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...

Fixed in Apache Tomcat 11.0.25

Low: Authenticated WebSocket session survives end of HTTP session CVE-2026-73180 If the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the...

PT-2026-77010

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description An integer overflow occurs within the Graphics component. An integer overflow is a condition...

Linux Distros Unpatched Vulnerability : CVE-2026-74267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever codel drops packets during peek, it calls...

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Microsoft Internet Key Exchange IKE Service Extensions contains a double free vulnerability that could enable remote code execution...

About the security content of Safari 26.6.1

About the security content of Safari 26.6.1 This update delivers security fixes that were first made available in the macOS Golden Gate 27 beta. This document describes the security content of Safari 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose,...

PT-2026-77017

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A race condition exists in the JavaScript Engine component. A race condition is a situation whe...

PT-2026-77023

Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.38 Firefox ESR version 140.13 Firefox ESR version 153.0 Firefox version 153 Thunderbird ESR version 140.13 Thunderbird ESR version 153.0 Thunderbird version 153 Description Internal bugs were identified that exhibit...

PT-2026-77020

Name of the Vulnerable Software and Affected Versions Firefox ESR version 140.13 Firefox ESR version 153.0 Firefox version 153 Thunderbird ESR version 140.13 Thunderbird ESR version 153.0 Thunderbird version 153 Description Internal bugs were identified that exhibit evidence of memory corruption ...

PT-2026-77213

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX VALUE and allocate ...

Linux Distros Unpatched Vulnerability : CVE-2026-72471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: prevent potential lcn remains uninitialized The target VCN being sought was not found within runs0, causing runlookup to return false. This causes...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

Linux Distros Unpatched Vulnerability : CVE-2026-72221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunrpc: wait for in-flight TLS handshake callback when cancel loses race When waitforcompletioninterruptibletimeout in svctcphandshake returns 0 timeout or...

Linux Distros Unpatched Vulnerability : CVE-2026-68478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount =...

Linux Distros Unpatched Vulnerability : CVE-2026-72196

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetv...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101998 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP serve...

Linux Distros Unpatched Vulnerability : CVE-2026-72107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in target-relative blocks, but eramap calculates the writeset block befor...

Linux Distros Unpatched Vulnerability : CVE-2026-72014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The...

Mozilla Firefox < 154.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-74 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR...