CVE-2026-100768

A use-after-free vulnerability exists in the Graphics: WebGPU component of the Firefox browser. This issue was addressed and fixed in Firefox 157 . The vulnerability was reported by Yaqoub Aldurayhim and is associated with Bugzilla report Bug 2064832 . No specific exploitation details or direct l...

CVE-2026-100767

A use-after-free vulnerability exists in the Networking: Cache component of the Firefox browser. This flaw can lead to high-impact consequences, including potential memory corruption or execution issues. The vulnerability has been addressed in several versions, including Firefox ESR 153.4 , Firef...

CVE-2026-100766

A vulnerability in the Networking: JAR component of the Firefox web browser allows for information disclosure . This issue has been addressed in several versions, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . The technical details regarding the specific...

CVE-2026-100765

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox . This flaw was addressed in Firefox ESR 153.4 and Firefox 157 . No specific exploit details are provided in the documents, but the vulnerability is reported to have a high impact .

CVE-2026-100764

The Firefox browser is affected by a privilege escalation vulnerability in the Graphics: WebGPU component. The root cause is identified as incorrect boundary conditions . This vulnerability was addressed and fixed in Firefox 157 . Exploitation details and specific attack vectors are not provided ...

CVE-2026-100762

A use-after-free vulnerability in the DOM: Content Processes component of Firefox allows for a sandbox escape . This flaw has been addressed in the following versions: Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Technical details regarding the specific root cau...

CVE-2026-100763

Mozilla Firefox and Thunderbird versions earlier than 157 are vulnerable to a heap buffer overflow due to incorrect boundary conditions in the Graphics: WebGPU component. An attacker could exploit this by inducing a user to open an email with a size of 2GB or greater. This vulnerability can lead ...

CVE-2026-100760

A sandbox escape vulnerability exists in the Security: Process Sandboxing component of Mozilla products. This flaw allows an attacker to bypass security restrictions, potentially leading to significant impacts including arbitrary code execution , information disclosure , denial of service , and u...

CVE-2026-100761

A use-after-free vulnerability in the Graphics: WebGPU component of Firefox allows for privilege escalation . This issue was resolved in Firefox 157 . While the specific technical root cause is not detailed in the provided documents, the impact is categorized as high . Information regarding activ...

CVE-2026-100759

A vulnerability exists in the Storage: Quota Manager component due to uninitialized memory . This issue can be exploited remotely to cause a denial of service . Affected products include Mozilla Thunderbird ESR (earlier than 153.4) and various versions of Firefox and Thunderbird . Remediation is ...

CVE-2026-100757

A use-after-free vulnerability exists in the Widget component of the Firefox web browser. This flaw was addressed in several versions, including Firefox ESR 153.4 , Firefox 157 , Firefox ESR 115.42 , and Firefox ESR 140.17 . Exploitation details are not provided in the documents, but the vulnerab...

CVE-2026-100758

A sandbox escape vulnerability exists in the DOM: Navigation component affecting multiple versions of Firefox and Thunderbird . The flaw allows an attacker to escape the sandbox, with potential impacts involving high confidentiality, integrity, and availability. Remediation is available in Firefo...

CVE-2026-100756

The Audio/Video: Playback component is vulnerable to incorrect boundary conditions . An attacker could trigger a heap buffer overflow by inducing a user to open an email with a size greater than or equal to 2GB . Impacted products include Firefox (versions 157, ESR 115.42, 140.17, and 153.4) and ...

CVE-2026-76114

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could exploit this flaw to cause Information disclosure . No specific exploit details or ...

CVE-2026-82973

The psyb0t/docker-mailbox software, prior to version 0.4.13 , is vulnerable to CRLF Injection due to improper neutralization of CRLF sequences during IMAP command construction. A remote unauthenticated attacker can inject additional IMAP commands into an authenticated upstream mailbox connection ...

CVE-2026-7192

The Dbit T-CPE301K 4G Mini WiFi Router is susceptible to a stack-based buffer overflow vulnerability. An authenticated attacker can trigger a denial of service (DoS) and a system reboot by sending a manipulated HTTP POST request to the /js/common/do_cmd.js endpoint. The vulnerability is caused by...

CVE-2026-7193

The T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment is vulnerable to unauthorized access due to the use of predefined static credentials . An attacker connected to the same network can exploit the Telnet service (port 23) to gain full root access to the device. No specific reme...

CVE-2026-102437

The esengine DeepSeek-Reasonix (Reasonix Studio) desktop application contains an OS Command Injection vulnerability in the internal/gitcmd component. The root cause is the improper neutralization of special elements during the invocation of git diff filter.clean/smudge . A local attacker who can ...

CVE-2026-73599

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could exploit this flaw, potentially leading to Server-side request forgery . Rem...

CVE-2026-101271

In an unspecified software system, OAuth credentials (access tokens) remain valid for their full lifetime even after the associated OAuth client application has been manually disabled. This behavior allows for potential unauthorized access during the period between application deactivation and to...

CVE-2026-98164

A flaw exists in the Linux kernel's KVM subsystem involving how memory write tracking is handled when virtualized System Management Mode (SMM) is enabled. The function kvm_gfn_is_write_tracked() incorrectly checks only the supplied memslot, failing to account for the fact that shadow pages are sh...

CVE-2026-101270

The software is vulnerable to HTML injection , where malicious HTML content can be injected into the help texts of various fields. This vulnerability is accessible to users with organizer permissions . No specific affected product versions or remediation steps are provided in the documents.

CVE-2026-101269

A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...

CVE-2026-101268

CVE-2026-101268 describes a customer session fixation vulnerability. An attacker can use a specially crafted link to trick a victim into logging into the attacker's customer account. If successful, the victim's order details may be stored within the attacker's account. This attack is specifically...

CVE-2026-73598

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this flaw to achieve Elevation of privileges . No specific ex...

CVE-2026-101267

A missing permission check allows low-privileged users who have access to an event, but lack access to its orders, to extract specific information. This vulnerability leads to a revenue information leak , exposing details such as the total revenue and the number of attendees . No specific softwar...

CVE-2026-73597

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access can exploit this flaw to cause Information disclosure , Information tampering , Protection mechanism by...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in process by skipping entire check-in steps. While the specific software or hardware platform is not named in the provided documents, the vulnerability results in an unauthorized bypass of required pr...

CVE-2026-73596

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could exploit this flaw to achieve elevation of privileges , information tampering ...

CVE-2026-87748

A Missing Authorization vulnerability exists in Interprobe Information Technologies Inc. Qorela DC affecting versions 1.6.1-RC29 through v1.6.2 . This flaw enables Privilege Abuse , allowing an attacker to escalate permissions. While the technical root cause is not detailed in the provided docume...

CVE-2026-102507

The Sliver C2 framework (version 1.7.7 and earlier ) is vulnerable to an unhandled panic in the operator gRPC handler . A compromised implant can trigger a Denial of Service (DoS) by sending malformed or empty Download responses (specifically zero-length or 1-3 byte payloads). This triggers an ou...

CVE-2026-66083

The Apache DolphinScheduler software (versions prior to 3.4.3 ) is vulnerable to an authorization flaw in the /datasources/unauth-datasource endpoint. An authenticated user can exploit this to access information regarding data sources they are not authorized to view. This could result in the expo...

CVE-2026-41875

The Quick.Cart software contains a Cross-Site Request Forgery (CSRF) vulnerability within the admin config panel . An attacker can craft a malicious website that, when visited by an administrator, automatically sends a POST request to modify the administrator's login credentials and password. Whi...

CVE-2026-73595

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are susceptible to a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Code execution , Information disclosure...

CVE-2026-102497

The Apache XmlSchema walker (xmlschema-walker) is vulnerable to a denial of service because it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups. A malicious schema containing such cycles can cause the walker to recurse indefinitely until a stack ov...

CVE-2026-102496

Apache XmlSchema is vulnerable to a Denial of Service (DoS) due to a lack of depth limits when building its schema model. A remote attacker can provide a crafted XML schema with deeply nested elements, triggering uncontrolled recursion that leads to a stack overflow and crashes the application. T...

CVE-2026-102495

A flaw exists in Apache XmlSchema where the parser fails to restrict the nesting depth of schema imports and includes . A remote attacker can provide a crafted schema with deeply nested references to trigger unbounded recursion , causing a stack overflow. This results in an application crash and ...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a...

CVE-2026-85520

The gmfeed (Google Merchant Center Feed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write via the feed.php endpoint. The root cause is a lack of authentication and input validation, which allows an attacker to control the output filename, path, extension, and content th...

CVE-2026-73593

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Active Debug Code vulnerability. A high privileged attacker with local access could exploit this flaw to cause Information disclosure , Information tampering , Protection mechanism bypass , and Unau...

CVE-2026-95520

A heap-based buffer overflow vulnerability exists in rpm when parsing untrusted RPM packages. The flaw is triggered when processing a symlink entry where the RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF. This causes an integer overflow in the iterReadArchiveNext() function, shrinking a buffer...

CVE-2026-95509

The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation via PostScript resource file hijacking. The application searches for files in predictable paths under **C:\gs*, which do not exist by default. Because Windows default ACLs allow authenticated users to create directories at the ro...

CVE-2026-76720

A vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that can be remotely exploited to cause a URL redirect . This flaw also carries a potential risk of Cross-Site Scripting (XSS) . To resolve this vulnerability, HPE provides a software update; users should update to ...

CVE-2026-15390

Das U-Boot is vulnerable to an out-of-bounds write when the CONFIG_IP_DEFRAG=y parameter is enabled. The root cause is a failure to clear the IP reassembly state after a complete datagram is delivered. An attacker capable of delivering fragmented IP traffic can achieve arbitrary code execution by...

CVE-2026-76719

A security vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that may be exploited remotely. The vulnerability allows for Cross-Site Scripting (XSS) and URL Redirection , which can lead to session hijacking , data theft , or other unauthorized actions. The CVSS v3.1 ...

CVE-2026-86843

The Apache Airflow Teradata provider is vulnerable to SQL injection because the compute-cluster example Dag allows unconstrained free-text Dag Params . These parameters are templated directly into operators that interpolate values into Teradata DDL . An attacker with permission to trigger the Dag...

CVE-2026-81930

The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...

CVE-2026-81862

Apache Airflow's Teradata provider contains a vulnerability where the S3ToTeradataOperator and AzureBlobStorageToTeradataOperator embed cloud storage credentials as plain string literals into CREATE MULTISET TABLE ... LOCATION statements. This occurs when using a private bucket/container without ...

CVE-2026-81914

The Apache Airflow Google provider is vulnerable to Google Drive query injection because it interpolates file and folder names directly into single-quoted string literals without escaping quote characters. An attacker can use an apostrophe in a filename to terminate the literal and append malicio...