CVE-2026-16385: Use of Uninitialized Resource

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16376: Uncontrolled Resource Consumption

Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16386: Use of Uninitialized Resource

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

Mozilla Firefox < 153.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 153.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-68 advisory. - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memo...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2741)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

PT-2026-61896

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Information disclosure occurs due to uninitialized memory within the Graphics: WebGPU component. Uninitialized memory refers to a condition where a program uses a memo...

PT-2026-61888

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A denial-of-service issue exists within the Graphics: WebGPU component. WebGPU is a modern API that allows web applications to access the GPU for hardware-accelerated...

PT-2026-61898

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An information disclosure issue exists in the Graphics: WebGPU component caused by uninitialized memory. This occurs when the system fails to clear a memory area befor...

PT-2026-61905

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that allows web applications to access the GPU for hardware-accelerat...

PT-2026-61897

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Information disclosure occurs due to uninitialized memory within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and...

EulerOS Virtualization 2.10.0 : mesa (EulerOS-SA-2026-2860)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.12.0 : mesa (EulerOS-SA-2026-2787)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.10.1 : mesa (EulerOS-SA-2026-2829)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS 2.0 SP10 : mesa (EulerOS-SA-2026-2703)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

EulerOS 2.0 SP10 : mesa (EulerOS-SA-2026-2662)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

[SECURITY] [DLA 4679-1] mesa security update

Debian LTS Advisory DLA-4679-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost July 13, 2026 https://wiki.debian.org/LTS Package : mesa Version : 20.3.5-1+deb11u1 $bookwormVERSION CVE ID : CVE-2026-40393 Debian Bug : A vulnerability has been found in the mesa 3D...

Debian dla-4679 : libd3dadapter9-mesa - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4679 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4679-1 [email protected] https://www.debian.org/lts/security/...

EulerOS 2.0 SP12 : mesa (EulerOS-SA-2026-2547)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

EulerOS 2.0 SP12 : mesa (EulerOS-SA-2026-2607)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

The vulnerability of Google Chrome’s WebGPU component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...