39507 matches found
firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...
SUSE CVE-2026-28705
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...
Fedora 44 : openvpn (2026-725faae162)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
thunderbird security update
140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...
CVE-2026-21089: Improper Input Validation
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21085: Out-of-bounds Write
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...
The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the __cgroup_bpf_run_filter_sysctl() function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cgroupbpfrunfiltersysctl function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the i801_access() function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system’s hardware bus allows a hacker to cause a service failure.
The vulnerability of the i801access function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system is related to premature release of resources during its operation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...
CVE-2026-72931
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
CVE-2026-69588
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-69497
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network...
CLSA-2026-1788887721 TuxCare security update for 10 packages (1 CVE)
TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 3.1.3.RELEASE-tuxcare.2...
CVE-2026-77500
A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...
Windows Device Association Service Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-77104
CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...