firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

SUSE CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

PT-2026-87327

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A use-after-free condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-88503

Impact The endpoint /rest/active-workflows returned every active workflow ID on the instance to any member, regardless of sharing, and workflow activation, deactivation and publication push events were broadcast to every connected client, carrying workflow IDs, version IDs and activation-error...

CVE-2026-69280: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-87349

Name of the Vulnerable Software and Affected Versions Push Message Routing Service affected versions not specified Description An out-of-bounds read exists in the Push Message Routing Service, which allows an authorized attacker to disclose sensitive information locally and affect the system. An...

CVE-2026-69303: Out-of-bounds Read

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...

PT-2026-87347

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A use-after-free condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

CVE-2026-86994: Missing Authorization

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast ...

CVE-2026-69300: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-62697: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-87204

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the cleanup process when handling HTTP/2 Server Push streams with the parenthandle configured to share connections with other handles. An attacker can execute arbitrary code or cause a denial of service by triggering...

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

ALPINE-CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99764 CVE-2026-18924 affecting package curl 8.11.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99801 CVE-2026-18924 affecting package mysql 8.0.46-1

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99858 CVE-2026-18924 affecting package rust 1.90.0-10

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...