Lucene search
+L
Bdu FstecRecent

95883 matches found

BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.16 views

The vulnerability of the Shell command shell in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.7AI score0.00404EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.8AI score0.00179EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.12 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the DHCP server service for Windows operating systems is related to improper handling of values. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to confidential information...

9.4CVSS5.8AI score0.00366EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00267EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

Vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint Enterprise Server, related to the issue of operations occurring outside of the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint Enterprise Server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00455EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.9 views

The vulnerability of the RuBackup backup system, related to insufficient resource capacity, allows a perpetrator to trigger a service failure.

The vulnerability of the RuBackup backup system is related to insufficient resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.7CVSS5.8AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.29 views

The vulnerability of the isInTrustedDirectory() function in the RunDlg.cpp script of the Notepad++ editor allows a hacker to execute arbitrary code.

The vulnerability of the isInTrustedDirectory function in the RunDlg.cpp script of the Notepad++ text editor is related to the ambiguity of the path handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00208EPSS
SaveExploits4References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.7 views

Vulnerability of NVIDIA Display Driver and Guest Driver: These drivers for NVIDIA’s virtual graphics processors allow attackers to escalate their privileges, cause service failures, and execute arbitrary code.

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...

8.8CVSS6AI score0.00188EPSS
SaveExploits0References2Affected Software17
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.12 views

The vulnerability of the functions File::prohibitWrappers() and IOFactory::load() in the PHP library PhpSpreadsheet allows a attacker to perform an SSRF attack or execute arbitrary code.

The vulnerability of the functions File::prohibitWrappers and IOFactory::load in the PHP spreadsheet library PhpSpreadsheet is related to deficiencies in the deserialization mechanism when processing the parameter filename. Exploiting this vulnerability can allow an attacker to perform an SSRF...

10CVSS6AI score0.00712EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of the UxTheme Library (uxtheme.dll) on Windows operating systems, which allows a perpetrator to trigger a service failure

The vulnerability of the UxTheme Library uxtheme.dll in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00383EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.17 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.8AI score0.00251EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.57 views

The vulnerability of the File Input service in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the File Input service in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface through a created HTML page...

5CVSS5.9AI score0.00154EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.16 views

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code within the sandbox.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code within the sandbox by using the created HTML page...

10CVSS7.5AI score0.00242EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.17 views

The vulnerability of the user interface of the WebUI on Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution.

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...

7.8CVSS6.6AI score0.00158EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.11 views

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.8AI score0.00234EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS6.2AI score0.00357EPSS
SaveExploits0References3Affected Software16
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.11 views

The vulnerability of the Microsoft Live Share Canvas SDK’s collaborative drawing tools, related to the lack of protection for website structure, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Live Share Canvas SDK relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9CVSS5.7AI score0.00554EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.10 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.4CVSS6AI score0.00364EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.13 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.4CVSS6AI score0.0039EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.21 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages stems from deficiencies in the deserialization mechanism, allowing attackers to exploit their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

9CVSS5.8AI score0.35216EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5.5CVSS5.7AI score0.00505EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.17 views

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.11 views

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00267EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.52 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.8CVSS6.1AI score0.00338EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.10 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS6AI score0.00372EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00267EPSS
SaveExploits0References2Affected Software16
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00267EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.13 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.3AI score0.00139EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.13 views

The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface through a created HTML page...

8.3CVSS7.2AI score0.00194EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.19 views

The vulnerability of the Tab Strip control elements in Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution attacks.

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...

7.8CVSS6.6AI score0.00171EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.21 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to operations that occur outside of the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...

4.7CVSS6AI score0.0037EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows Push Notifications service allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Graphics component in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.16 views

The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00185EPSS
SaveExploits0References2Affected Software13
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.10 views

The vulnerability of the Windows kernel component of the Windows operating system allows attackers to increase their privileges.

The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.8AI score0.00251EPSS
SaveExploits0References2Affected Software14
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2Affected Software13
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.26 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.12 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS6AI score0.00372EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5.5CVSS5.7AI score0.00937EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of Microsoft Word, Microsoft Office products, Microsoft 365 Apps for Enterprise, SharePoint Enterprise Server, and SharePoint Server relates to the manipulation of pointers, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS6AI score0.00455EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.9 views

The vulnerability of the RuBackup backup system, related to access control errors, allows a intruder to gain unauthorized access and edit information.

The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...

3.7CVSS5.8AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.21 views

The vulnerability of Microsoft Visual Studio Code’s source editor, related to insufficient input validation, allows attackers to bypass existing security mechanisms.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...

7.1CVSS5.8AI score0.0035EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.15 views

The vulnerability of the Windows Bluetooth Service in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Bluetooth Service in the operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00286EPSS
SaveExploits0References2Affected Software16
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.12 views

The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS5.7AI score0.00871EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...

9.4CVSS6.2AI score0.00218EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.13 views

The vulnerability of the miSyncDestroyFence() function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the miSyncDestroyFence function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause service...

7.8CVSS5.9AI score0.00142EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.19 views

The vulnerability of the FreeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the FreeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow a malicious...

7.8CVSS5.7AI score0.00154EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.14 views

The vulnerability of the CreateSaverWindow() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X Window System Server implementation, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CreateSaverWindow function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X Window System X.Org Server implementation, is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor...

5.5CVSS6AI score0.00141EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.9 views

The vulnerability of the DRIGetBuffersWithFormat module in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the DRIGetBuffersWithFormat module in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain elevated privileges and cause service interruptions...

5.5CVSS6.1AI score0.00148EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.19 views

The vulnerability of the Cargo package manager in the Rust programming language arises from the use of non-canonical URL paths for authentication solutions. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Cargo package manager in the Rust programming language is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.8AI score0.00478EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.13 views

The vulnerability of the Web Codecs component in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the Web Codecs component in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.8CVSS6.4AI score0.0056EPSS
SaveExploits0References15Affected Software4
Total number of security vulnerabilities95883