Astra Linux – Vulnerability in Firefox

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

Astra Linux – Vulnerability in Firefox and Thunderbird

Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100973 advisory. Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101123 advisory. Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

The vulnerability of the DefaultHeaderFilterStrategy class in the NATS Java framework by Apache Camel allows a attacker to perform an SSRF attack.

The vulnerability of the DefaultHeaderFilterStrategy class in the NATS Java framework, Apache Camel, is related to insufficient validation of input data when processing parameters such as inFilter, inFilterPattern, and inFilterStartsWith. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the NATS messaging system server, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms and increase their privileges.

The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the JmsBinding.extractBodyFromJms process when handling JMS ObjectMessages with the mapJmsMessage option enabled. An attacker can inject arbitrary Exchange state by publishing a crafted ObjectMessage...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the default ObjectInputFilter. An attacker can trigger DNS-based information disclosure by sending a Java-serialized payload that deserializes into a collection such as HashMap containing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: skmsg: The allocskmsg function can be called from a non-sleepable context. The skpsockverdictrecv function uses rcureadlock protection. We need the callers to pass a gfpt argument to avoid issues. The report from syzbot stated:...

Vulnerability of the real-time messaging system of the Grafana Live platform for monitoring and observation. This platform allows a hacker to trigger a service failure.

The vulnerability of the Grafana Live messaging system, a platform for monitoring and surveillance, involves unlimited resource allocation when processing requests to the final destination. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

UBUNTU-CVE-2026-33223

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, the NATS message header Nats-Request-Info: is supposed to be a guarantee of identity by the NATS server, but the stripping of this header from inbound messages was...

CVE-2026-33246

A flaw was found in NATS-Server. A remote attacker, by connecting a leafnode to a NATS-Server, could propagate unchecked identity claims through the Nats-Request-Info: message header. This vulnerability allows for the spoofing of client identities, potentially leading to NATS clients making...

CVE-2026-33223

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, the NATS message header Nats-Request-Info: is supposed to be a guarantee of identity by the NATS server, but the stripping of this header from inbound messages was...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 140.8 MFSA 2026-17 bsc1258568: CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component CVE-2026-2758: Use-after-free in the JavaScript: GC component CVE-2026-2759: Incorrect boundary...

firefox: thunderbird: Privilege escalation in the Messaging System component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Messaging System component...

firefox: thunderbird: Privilege escalation in the Messaging System component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Messaging System component...

Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2026-13447)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in several Mozilla produc...

firefox: thunderbird: Privilege escalation in the Messaging System component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Messaging System component...

firefox: thunderbird: Privilege escalation in the Messaging System component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Messaging System component...

firefox: thunderbird: Privilege escalation in the Messaging System component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Messaging System component...