Security Vulnerabilities fixed in Firefox 159 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component Reporter satyamasd...

PT-2026-126591

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159...

PT-2026-126595

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

PT-2026-126592

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159...

PT-2026-126589

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159...

PT-2026-126594

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159...

PT-2026-126599

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159...

PT-2026-126598

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

Linux Distros Unpatched Vulnerability : CVE-2026-98927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Fix life cycle of the nestedmmus array The nestedmmus array holds the shadow page tables that are used when a guest is running a nested context...

MiracleLinux 9 : kernel-5.14.0-687.50.1.el9_8 (AXSA:2026-2164:110)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2164:110 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID...

RockyLinux 8 : gcc (RLSA-2026:89830)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89830 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

SUSE SLED15: cpp7 / cross-nvptx-gcc7 / cross-nvptx-newlib7-devel / gcc7 / etc (SUSE-SU-2026:4913-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4913-1 advisory. - CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. - CVE-2026-102010: UAF due to imprope...

CentOS Linux 8.4 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793102654)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793102654 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library...

CentOS Linux 8.5 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793103045)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793103045 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library...

CentOS Linux 8 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793091465)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793091465 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the libra...

PT-2026-126492

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the JavaScript: GC component. Use-after-free is a memory...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-scanner Detection-only triage scanner for PHP2Sh...

kernel: fuse: re-lock request before returning from fuse_ref_folio()

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. The fusereffolio function does not properly re-lock a request after unlocking it, which can lead to a use-after-free vulnerability. A local attacker could exploit this flaw to potentially execute arbitrary code or caus...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

kernel: net/handshake: Take a long-lived file reference at submit

A flaw was found in the Linux kernel's networking handshake component. This vulnerability occurs because a critical file reference is not properly maintained during the handshake process. An attacker could potentially exploit this by causing the system to prematurely release a socket, leading to ...