CVE-2026-113869

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled...

sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension

A flaw was found in SQLite. A use-after-free vulnerability in the R-Tree extension allows an attacker to cause a Denial of Service DoS by convincing a user or service to process a specially crafted database. By manipulating internal shadow tables used by the extension, the application improperly...

CVE-2026-112094

A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...

CVE-2026-113869 Use-after-free in S/MIME decryption during a security device password prompt

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

CVE-2026-113869

Mozilla Thunderbird versions earlier than 158.0.1 are vulnerable to a use-after-free memory error during S/MIME message decryption. The flaw occurs when a message load finishes or is canceled while an interactive password prompt (e.g., for a smartcard PIN or Primary Password) is still open, causi...

EUVD-2026-105296

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

CVE-2026-113869 Use-after-free in S/MIME decryption during a security device password prompt

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

CVE-2026-113869

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

CVE-2026-113869

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...

SUSE-SU-2026:4772-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19666: Use-after-free in...

CLSA-2026-1791894819 glibc: Fix of 8 CVEs

CVE-2026-6368: posix: make wordexp work on a copy of wewordv when WRDEAPPEND is set and restore the original on non-NOSPACE errors, preventing a use-after-free in wordfree; add tst-wordexp-append regression test - CVE-2026-77117: iconvdata: clear the pending character in the SHIFTJISX0213 decoder...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-98496

A flaw was found in the Linux kernel's Airoha Neural Processing Unit NPU driver. During device unbinding or driver removal, an interrupt timing issue allows watchdog tasks to be scheduled after cleanup procedures have completed. A local user with administrative privileges could trigger this flaw ...

CVE-2026-98491

A flaw was found in the Linux kernel's Open vSwitch subsystem. When cloned network packet buffers share an unconfirmed connection tracking entry, committing the entry with conflicting extensions can trigger a use-after-free memory issue during cleanup. An attacker could exploit this vulnerability...

Use of Incorrectly-Resolved Name or Reference

Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the lock-file open logic in unix.py and related backends, where acquiring a lock on a file that does not yet exist creates it with a permissive mode e.g. 0o666 rather than preserving the...

Use of Multiple Resources with Duplicate Identifier

Overview Affected versions of this package are vulnerable to Use of Multiple Resources with Duplicate Identifier via trybreakexpiredlock and trybreakstalelock in api.py and lease.py, where an attacker with write access to the lock directory can replace a held lock file with a symlink pointing at ...

CLSA-2026-1792507096 libxslt: Fix of 6 CVEs

CVE-2019-11068: fix security framework bypass in xsltCheckRead and xsltCheckWrite callers - CVE-2019-18197: fix dangling pointer in xsltCopyText - CVE-2019-5815: always set context node before calling XPath iterators - CVE-2021-30560: fix use-after-free in xsltApplyTemplates - CVE-2024-55549: fix...

libxslt: Fix of 6 CVEs

CVE-2019-11068: fix security framework bypass in xsltCheckRead and xsltCheckWrite callers - CVE-2019-18197: fix dangling pointer in xsltCopyText - CVE-2019-5815: always set context node before calling XPath iterators - CVE-2021-30560: fix use-after-free in xsltApplyTemplates - CVE-2024-55549: fix...

CVE-2026-94192

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with txmmoduleobjectdeallocate. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation is...