Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44 and 153.6, as well as Mozilla Thunderbird versions prior to 153.6 and 159. This vulnerability stems from use-after-free issues in the DOM Editor component, which may lead to memo...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from use-after-free issues in its DOM: Core & HTML components, which may lead to memory corruption or arbitrary code execution...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Networking...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in the Networking: WebSockets component...

PT-2026-127265

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description A use after free issue exists in the Video component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-126595

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

PT-2026-126605

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159...

Linux Distros Unpatched Vulnerability : CVE-2026-99051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146333 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146295 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146134 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to...

RockyLinux 9 : libreswan (RLSA-2026:89748)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89748 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

PT-2026-126599

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159...

PT-2026-126598

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

PT-2026-126594

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159...

PT-2026-126603

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159...

PT-2026-126606

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159...

AlmaLinux 9 : libreswan (ALSA-2026:89748)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:89748 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

PT-2026-126588

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159...

AlmaLinux 8 : thunderbird (ALSA-2026:90913)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90913 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free i...