CVE-2026-109765 Race condition, use-after-free in the Graphics: Text component

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109765 Race condition, use-after-free in the Graphics: Text component

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98525

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109765

A race condition and use-after-free vulnerability exists in the Graphics: Text component of several Mozilla products. This flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific exploit details or in-the-wild exploitation information are prov...

CVE-2026-109723

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98493

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109723 Integer overflow in the Layout: Text and Fonts component

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109723

An integer overflow vulnerability exists in the Layout: Text and Fonts component of several Mozilla products. This flaw could potentially lead to arbitrary code execution, sandbox escape, information disclosure, mitigation bypass, or privilege escalation. The vulnerability has been addressed in F...

CVE-2026-109710 Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109710

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98636

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109710 Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109710

A use-after-free vulnerability exists in the Graphics: Text component of the Firefox and Thunderbird browsers. This flaw was addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . The vulnerability is associated with Bug 2068338 . While the t...

CVE-2026-109854

The m17n-lib library contains a flaw where an attacker providing crafted input to an application processing ISO-2022 encoded text can trigger an uninitialized stack read during UTF-8 decoding. If the application returns the decoded output, this may lead to unexpected behavior and limited informat...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

EUVD-2026-98165

Frappe before 15.118.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability in dashboard chart filters because jQuery renders entered filter values as rich text. Authenticated attackers can store malicious filter values that execute scripts in the browsers of users who vie...

CVE-2026-102225: Out-of-bounds Read

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

PT-2026-111929

Name of the Vulnerable Software and Affected Versions Windows Text Shaping affected versions not specified Description An out-of-bounds read in Windows Text Shaping allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. An out-of-bounds read...

PT-2026-111920

Name of the Vulnerable Software and Affected Versions Windows Text Shaping affected versions not specified Description A heap-based buffer overflow occurs in Windows Text Shaping, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A...

KB5126657: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2026)

The remote Windows host is missing security update 5126657. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...