firefox: thunderbird: Sandbox escape in the Profile Backup component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...

firefox: thunderbird: Sandbox escape in the Profile Backup component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...

firefox: thunderbird: Sandbox escape in the Profile Backup component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...

CVE-2026-49468

creationtimestamp| type| source ---|---|--- 2026-06-17 05:11:40+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mohkg5ewtq2d 2026-06-24 21:01:41+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2sreat3p2f 2026-06-27 09:07:08+00:00| seen|...

CVE-2026-35306

creationtimestamp| type| source ---|---|--- 2026-06-17 05:04:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mohjz6m67e2e 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 13:37:06+00:00| seen|...

CVE-2026-12310

creationtimestamp| type| source ---|---|--- 2026-06-17 05:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohjs7blwm2v 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-47749

creationtimestamp| type| source ---|---|--- 2026-06-17 03:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd3rjm6m2t...

CVE-2026-47340

creationtimestamp| type| source ---|---|--- 2026-06-17 02:48:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mohcfge3hx2k...

CVE-2026-12463

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 06:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohnc6pg2w2x 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-12454

creationtimestamp| type| source ---|---|--- 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 05:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohn2725zk2n 2026-06-21 18:00:00+00:00| seen|...

CVE-2026-36849

creationtimestamp| type| source ---|---|--- 2026-06-17 01:42:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moh6qy7igr2p...

CVE-2026-49057

creationtimestamp| type| source ---|---|--- 2026-06-17 00:28:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh2k5rnnn2g 2026-06-22 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3movsnd7qvk2k...

CVE-2026-25470

creationtimestamp| type| source ---|---|--- 2026-06-17 00:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh26rxriy2v...

CVE-2026-48055

creationtimestamp| type| source ---|---|--- 2026-06-17 00:13:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogzrb36ja2x...

CVE-2026-48783

creationtimestamp| type| source ---|---|--- 2026-06-17 00:11:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogznfyenc2x...

CVE-2026-48929

creationtimestamp| type| source ---|---|--- 2026-06-17 00:05:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogzdc4ksd2g...

PT-2026-50485

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description Open WebUI contains a stored Cross-Site Scripting XSS issue where the platform fails to validate profile images for models. While similar issues were patched for user and webhook profile images, t...

PT-2026-50520

Name of the Vulnerable Software and Affected Versions Hermes WebUI versions prior to 0.51.368 Description An authorization bypass exists in the get profile cookie function, which accepts unauthenticated profile names from the hermes profile cookie. An authenticated attacker can forge the value of...

PT-2026-50394

Name of the Vulnerable Software and Affected Versions Zephyr versions 1.7 through 4.4.0 Description The Bluetooth Classic Hands-Free Profile HFP Hands-Free role parser in subsys/bluetooth/host/classic/hfp hf.c contains an out-of-bounds write. During Service Level Connection setup, the Hands-Free ...

PT-2026-50480

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description An issue exists where the process picture url function in backend/open webui/utils/oauth.py performs URL validation only on the initial URL. Subsequently, it uses aiohttp.ClientSession.get without...