PT-2026-126515

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTML components. A use-after-free occurs...

PT-2026-126508

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists within the DOM: Core and HTM...

PT-2026-126510

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 115.44 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6 Description A use-after-free issue exists in the SVG component...

PT-2026-126485

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird ESR versions prior to 153.6 Description A use-after-free issue exists in the Layout: Text and Fonts component. A use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-99001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/i2c: cancel the client work on remove xei2cnotifier stores the DesignWare adapter in i2c-adapter and schedules i2c-work when the adapter is registered...

Linux Distros Unpatched Vulnerability : CVE-2026-98998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in platform drvdata, but th1520dwhdmiremove was reading it back as struct...

Linux Distros Unpatched Vulnerability : CVE-2026-98995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: reset the old parent's -overmount in mntchangemountpoint umountmnt resets -overmount of the parent when it unmounts the mount that overmounts it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146312)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146312 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146317 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the siz...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146311 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146310 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146303 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches...

MiracleLinux 9 : python3.9-3.9.25-7.el9_8.6 (AXSA:2026-2165:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2165:08 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verificatio...

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 For more details about the security issues, including the impact, a CVSS score,...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Graphics: Text component...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from use-after-free issues in its Print Preview component, which may lead to sandbox escape...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Layout component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the Graphics: WebRender component, which may lead to sandbox escape...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from use-after-free issues in its DOM: Core & HTML components, which may lead to memory corruption...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the WebRTC Signaling component, potentially leading to privilege escalation...