firefox: thunderbird: Use-after-free in the Widget component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget component...

firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget: Gtk component...

firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget: Gtk component...

firefox: thunderbird: Use-after-free in the Widget component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget component...

Important: firefox

Issue Overview: Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-100756 Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR...

Important: firefox

Issue Overview: Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-100756 Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR...

Amazon Linux 2023 : firefox (ALAS2023-2026-3214)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3214 advisory. Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-10075...

Amazon Linux 2 : firefox (ALASFIREFOX-2026-066)

The version of firefox installed on the remote host is prior to 140.17.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-066 advisory. Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR...

org.webjars.npm:okta__okta-signin-widget (2.21.0), ro.isdc.wro4j:wro4j-extensions (>=2.0.0, <=2.1.1) +2 more potentially affected by CVE-2026-106446 via org.webjars.npm:handlebars (>=4.0.14, <=4.7.7)

org.webjars.npm:handlebars MAVEN version =4.0.14, =2.0.0, =2.0.0, =2.1.0, =2.1.1 Source cves: CVE-2026-106446 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20574184...

advisories

Sobre mí Twitter: @justinsteven Blog: https://www.justinsteven.com/ Avisos de seguridad Listados en orden cronológico inverso. Haz clic en cualquier título para leer el aviso completo. Gartner Peer Insights Widget postMessage DOM XSS Fecha de divulgación: 2023-02-03 El Gartner Peer Insights Widge...

firefox: thunderbird: Use-after-free in the Widget component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget component...

firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Widget: Gtk component...

DRUPAL-CONTRIB-2026-211

The module Country provides a dedicated field type for Drupal core's official country list. The module does not sufficiently escape user input in its autocomplete widget, which can lead to a cross site scripting vulnerability. This vulnerability is mitigated by the fact that it can not occur out ...

CVE-2026-96530 Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget

The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials...

CVE-2026-96530 Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget

The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials...

EUVD-2026-94189

The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials...

CVE-2026-96530

The Optimole WordPress plugin versions prior to 4.2.15 is vulnerable to a sensitive data disclosure. The root cause is a missing capability check before exposing stored image-optimization account data within a dashboard widget. This flaw allows any authenticated user , including those with the lo...

PT-2026-107412

The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials...

CVE-2026-96530: Exposure of Sensitive Information to an Unauthorized Actor

The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials...

Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211

The module Country provides a dedicated field type for Drupal core's official country list. The module does not sufficiently escape user input in its autocomplete widget, which can lead to a cross site scripting vulnerability. This vulnerability is mitigated by the fact that it can not occur out ...