PT-2026-126570

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the Graphics component. Use-after-free is a memory...

PT-2026-126455

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the JavaScript: Standard...

UBUNTU-CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146300 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgenchangename replaces pktdev-entry while holding...

AlmaLinux 9 : libreswan (ALSA-2026:89748)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:89748 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146329 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then...

AlmaLinux 8 : thunderbird (ALSA-2026:90913)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90913 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free i...

PT-2026-127293

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to open...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the JIT component of the JavaScript engine, potentially leading to memory corruption or arbitrary code execution...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox and Thunderbird; it stems from a use-after-free issue in the DOM: Core & HTML component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from an integer overflow and use-after-free condition in the Graphics: Text component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Layout: Images, Video, and HTML Frames component, which may lead to memory corruption or arbitrary code execution...

PT-2026-126596

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159...

chromium -- security fixes

Chrome Releases reports: This update includes 52 security fixes: 571156746 Critical CVE-2026-118306: Memory corruption in FileSystem. 572193211 Critical CVE-2026-118331: Improper input validation in FileAPI. 574776938 Critical CVE-2026-118348: Improper input validation in Skia. 574852698 Critical...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Disability Access APIs component...

PT-2026-126450

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the Layout component...

PT-2026-126461

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the Storage: IndexedDB...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Paint, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

PT-2026-126536

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTML component. A use-after-free occurs...

PT-2026-127301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Paint component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...