CVE-2026-100788

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100813 Invalid pointer in the JavaScript Engine: JIT component

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

EUVD-2026-88792

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157...

CVE-2026-100813 Invalid pointer in the JavaScript Engine: JIT component

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100813

The Firefox web browser is affected by an invalid pointer vulnerability within the JavaScript Engine: JIT component . This flaw was addressed in Firefox 157 . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-100788

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100788

A critical invalid pointer vulnerability exists in the JavaScript: WebAssembly component of several Mozilla products, including Firefox , Firefox ESR , and Thunderbird . Exploitation of this flaw can lead to remote code execution (ACE) , denial of service (DoS) , information disclosure (OSI) , an...

CVE-2026-100788 Invalid pointer in the JavaScript: WebAssembly component

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100788 Invalid pointer in the JavaScript: WebAssembly component

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

EUVD-2026-88940

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...

CVE-2026-97593

A flaw was found in the Linux kernel's s390 IOMMU Input-Output Memory Management Unit driver. When performing address translation for an unmapped I/O virtual address on systems configured with five-level translation tables, the driver fails to verify whether a region table pointer is valid before...

CVE-2026-97416

A flaw was found in the Linux kernel's Btrfs file system. An attacker could exploit this vulnerability by mounting a corrupted file system image and initiating a balance operation. Due to a missing validation check when querying block group metadata, the kernel triggers a null pointer dereference...

CVE-2026-97418

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem within the ESS AudioDrive ES18xx sound card driver. During mixer initialization, the driver fails to verify whether memory allocation for sound control structures succeeds before dereferencing the returned...

CVE-2026-97414

A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...