CVE-2026-24881

In GnuPG before 2.5.17, a crafted CMS S/MIME EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that...

CVE-2026-24881

In GnuPG before 2.5.17, a crafted CMS S/MIME EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that...

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Meta on Tuesday announced it's adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they are and what they do. The feature, similar to Lockdown Mode in Apple iOS and Advanced Protection in Android, aims to protect individuals, such as...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox 147.0.2...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

UBUNTU-CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox 147.0.2...

CVE-2026-24868

CVE-2026-24868 describes a mitigation bypass in Firefox’s Privacy: Anti-Tracking component, affecting Firefox versions earlier than 147.0.2. The vulnerability is tied to a bypass of mitigation controls in the Anti-Tracking module; no exploit vectors or root-cause details are provided in the suppl...

CVE-2026-24868 Mitigation bypass in the Privacy: Anti-Tracking component

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox 147.0.2...

CVE-2026-24868 Mitigation bypass in the Privacy: Anti-Tracking component

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

CVE-2026-24868

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2...

EUVD-2026-4816

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox 147.0.2...

A WhatsApp bug lets malicious media files spread through group chats

WhatsApp is going through a rough patch. Some users would argue it has been ever since Meta acquired the once widely trusted messaging platform. User sentiment has shifted from “trusted default messenger” to a grudgingly necessary Meta product. Privacy-aware users still see WhatsApp as one of the...

PT-2026-4957

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147.0.2 Description A mitigation bypass exists in the Privacy: Anti-Tracking component. This issue allows bypassing of implemented protections. Recommendations Update Firefox to version 147.0.2 or later...

GNUPG code-related vulnerabilities

GNU Public Key Exchange GNUPG is a set of open-source encryption software from the GNU community in the United States, licensed under the GNU General Public License. This software supports algorithms such as public keys, symmetric encryption, and hashing. Versions of GnuPG prior to 2.5.17 had cod...

GNU Privacy Guard 2.5.17

GnuPG the GNU Privacy Guard or GPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As suc...

Firefox -- Multiple vulnerabilities

https://bugzilla.mozilla.org/showbug.cgi?id=2007302 reports: Mitigation bypass in the Privacy: Anti-Tracking component. Use-after-free in the Layout: Scrolling and Overflow component...

PT-2026-5009

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.5.17 Description A specially crafted CMS S/MIME EnvelopedData message with an oversized wrapped session key can lead to a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can result in...