CVE-2026-74968

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74938

A mitigation bypass in the JavaScript: GC component of Firefox and Thunderbird allows remote attackers to bypass memory-protection mitigations, potentially leading to arbitrary code execution. CVSS 9.1 (CRITICAL). Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1 . S...

CVE-2026-74964

An integer overflow in Firefox/Thunderbird's Graphics component (CVSS 9.8 critical, network-exploitable with no privileges) enables arbitrary code execution, information disclosure, and denial of service. Fixed in Firefox 154, Firefox ESR 140.14/153.1, Thunderbird 154/140.14/153.1; Debian stable ...

CVE-2026-74960 Site isolation issue in the WebExtensions component

Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

EUVD-2026-60750

Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74940 Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

EUVD-2026-60743

Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

EUVD-2026-60745

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74934

CVE-2026-74934 is a site isolation issue in the Graphics: CanvasWebGL component of Mozilla Firefox and Thunderbird. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw requiring user interaction and high attack complexity, b...

CVE-2026-74936

A use-after-free in the JavaScript: WebAssembly component of Firefox/Thunderbird can lead to memory corruption and arbitrary code execution. CVSS 9.8 (network, no auth required). Fixed in Firefox 154, ESR 140.14, ESR 153.1, Thunderbird 154, 140.14, and 153.1; Debian and Slackware packages updated...

CVE-2026-75834

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

MINI-QPP6-8C43-JP42

Bulletin has no description...

[SECURITY] [DLA 4745-1] linux-6.12 security update

Debian LTS Advisory DLA-4745-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 18, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.101-1deb12u1 CVE ID : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078 CVE-2026-53090...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Linux Distros Unpatched Vulnerability : CVE-2026-72286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper...

Linux Distros Unpatched Vulnerability : CVE-2026-68473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/uaccess: correct check for CONFIGPPCE500 in maskuseraddress maskuseraddress incorrectly checks for CONFIGE500 instead of CONFIGPPCE500, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-68474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it...

Linux Distros Unpatched Vulnerability : CVE-2026-72095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-fence: Make dmafencededuparray robust against 0-count input dmafencededuparray returns 1 when called with numfences == 0: the for-loop body never executes, ...

Linux Distros Unpatched Vulnerability : CVE-2026-72480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching...

Linux Distros Unpatched Vulnerability : CVE-2026-74328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmab...