CVE-2026-124878: Mozilla Firefox: Use-after-free in the Layout: Positioned component

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160...

CVE-2026-124881: Mozilla Firefox: Use-after-free in the CSS Parsing and Computation component

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124923: Mozilla Firefox: Sandbox escape in the Agent component

Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160...

CVE-2026-124918: Mozilla Firefox: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124920: Mozilla Firefox: Uninitialized memory in the Graphics: WebGPU component

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160...

CVE-2026-124943: Mozilla Firefox: Use-after-free in the Layout component

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160...

CVE-2026-124947: Mozilla Firefox: Incorrect boundary conditions in the Graphics component

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160...

CVE-2026-124948: Mozilla Firefox: Incorrect boundary conditions, use-after-free in the Graphics component

Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-12708: Cloudflare tokio-quiche: Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3…

Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every previously unseen flow identifier quarter stream ID received in a DATAGRAM frame, tokio-quiche creates and retains new, per-flow state. A remote peer...

CVE-2026-124927: Mozilla Firefox: Site isolation issue in the Graphics: WebRender component

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124928: Mozilla Firefox: Mitigation bypass in the SVG component

Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160...

CVE-2026-124929: Mozilla Firefox: Information disclosure in the Layout: Form Controls component

Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124934: Mozilla Firefox: Spoofing issue in the Security component

Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124937: Mozilla Firefox: Other issue in the Media component in Firefox for Android

Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160...

CVE-2026-114359: Eclipse Foundation Eclipse Kura: Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives

Eclipse Kura downloads deployment packages DPs from a remote URL without any limit on the size of the data it receives. A malicious or compromised HTTPS server, or an attacker able to tamper with a plain-HTTP download, can stream an arbitrarily large or endless response. Kura writes the response ...

CVE-2026-123082: Docker Docker Desktop: Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to…

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token a JWT in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when i...

CVE-2026-124037: Flock Flock Safety Platform: An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from…

An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license plate to retrieve that registrant's...

CVE-2026-124747: Red Hat: A flaw was found in BusyBox

A flaw was found in BusyBox. When resuming a download over File Transfer Protocol FTP, the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can...

CVE-2026-125744: pretix: Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token

Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout...

CVE-2026-120399: Red Hat Red Hat Edge Manager 1: A flaw was found in flightctl

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections...

CVE-2026-124853: Mozilla Firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component

Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124856: Mozilla Firefox: Incorrect boundary conditions in the Networking: HTTP component

Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124857: Mozilla Firefox: Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124858: Mozilla Firefox: Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124894: Mozilla Firefox: Use-after-free in the Networking: Cookies component

Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124895: Mozilla Firefox: Use-after-free in the Storage: localStorage & sessionStorage component

Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124902: Mozilla Firefox: Same-origin policy bypass due to race condition in the Audio/Video component

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124903: Mozilla Firefox: Sandbox escape due to use-after-free in the IPC component

Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124905: Mozilla Firefox: Sandbox escape in the DOM: Navigation component

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-124906: Mozilla Firefox: Use-after-free in the Graphics: WebRender component

Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-105426: Ivanti Endpoint Manager Mobile: Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated…

Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root...

CVE-2026-124887: Mozilla Firefox: Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-82509: vlang v: V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS…

V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConnectConfig.validate and...

CVE-2026-125752: meteroid-oss Meteroid: Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService…

Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...

CVE-2026-108187: Zoom Communications Zoom Workplace: Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of…

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-124910: Mozilla Firefox: Mitigation bypass in the WebExtensions component

Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

CVE-2026-124877: Mozilla Firefox: Use-after-free in the Layout: Positioned component

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-66334: AMI AptioV: AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits...

CVE-2026-86336: Apache Software Foundation Apache TomEE: Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods…

Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access restrictions being enforced. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue...

CVE-2026-111244: Apache Software Foundation Apache TomEE: When MicroProfile JWT role-based access control is used, the access constraints of JAX-RS resources are not always…

When MicroProfile JWT role-based access control is used, the access constraints of JAX-RS resources are not always enforced as declared: resources that declare an empty set of allowed roles are accessible to every caller, resource classes that inherit the same method from a common superclass shar...

CVE-2026-18128: ivanti Endpoint Manager: Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows…

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to in a MITM position to read and modify HTTP traffic...

CVE-2026-86531: Apache Software Foundation Apache TomEE: The embedded OpenEJB HTTP server does not limit the size of incoming request bodies or of multipart requests, and does…

The embedded OpenEJB HTTP server does not limit the size of incoming request bodies or of multipart requests, and does not remove the temporary files it creates for multipart parts. A remote unauthenticated attacker can cause excessive memory or disk usage, leading to denial of service. Deploymen...

CVE-2026-111251: Apache Software Foundation Apache TomEE: The admin service of the standalone OpenEJB server accepts stop requests without any authentication

The admin service of the standalone OpenEJB server accepts stop requests without any authentication. Any local user or process able to connect to the admin port can stop the server, leading to denial of service; the admin service is enabled by default in the standalone server and bound to the...

CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs

SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successful exploitation could lead to persiste...

CVE-2026-13409: Axis Communications AB AXIS OS: The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account...

CVE-2026-107405: Ivanti Endpoint Manager Mobile: An exposed dangerous function in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a local…

An exposed dangerous function in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a local authenticated attacker to trigger a denial of service...

CVE-2026-121885: Red Hat: A flaw was found in Podman

A flaw was found in Podman. An attacker can trigger a Denial of Service DoS by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart. If a user runs the malicious container...

CVE-2026-97402: Eclipse Foundation Eclipse Kura: In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the…

In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of an over-the-air BLE advertising payload. Any unauthenticated attacker within BLE radio range can broadcast a two-byte advertising payload that drives the Kura...

CVE-2026-105813: Ivanti User Workspace Manager: Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to…

Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token...

CVE-2026-124915: Mozilla Firefox: Incorrect boundary conditions in the Graphics: WebGPU component

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...