CVE-2026-109725

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-109722

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

CVE-2026-109775

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the WebRTC component...

CVE-2026-109781

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Printing: Output component...

CVE-2026-119340

A flaw was found in tesseract. An attacker can cause a Denial of Service DoS by providing a specially crafted traineddata file to be loaded by the application. Due to improper validation of matrix dimensions, negative or oversized values can lead to inconsistent memory allocation and out-of-bound...

CVE-2026-109743

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Panning and Zooming component...

CVE-2026-109739

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the WebExtensions component...

CVE-2026-109731

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics: Canvas2D component...

CVE-2026-109728

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Animation component...

CVE-2026-109721

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript Engine: JIT component...

CVE-2026-119341

A flaw was found in Tesseract. The application is vulnerable to a Denial of Service DoS caused by memory corruption when processing pre-adapted template files with the legacy engine enabled. This issue occurs because raw data structures are loaded from template files without safely neutralizing...

CVE-2026-119339

A flaw was found in Tesseract. When loading a specially crafted trained model file, the engine fails to properly validate neural network configuration data, triggering an unhandled assertion failure instead of returning an error. A local attacker or application consumer could exploit this by...

CVE-2026-119338

A flaw was found in Tesseract. The page rendering component mishandles memory while processing right-to-left text layouts, leading to a use-after-free and double-free condition. An attacker could exploit this vulnerability by providing a specially crafted document or image, causing the applicatio...

CVE-2026-118022

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

CVE-2026-61846

A flaw was found in crass. The CSS parser is vulnerable to a Denial of Service DoS because it recursively processes simple blocks and functions without enforcing a depth limit. A remote attacker can supply a specially crafted CSS input containing deeply nested structures to trigger stack exhausti...

CVE-2026-61848

A flaw was found in crass. This vulnerability allows a remote attacker to cause a Denial of Service DoS through excessive CPU resource consumption. When parsing input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in disproportionately lo...

CVE-2026-62162

A flaw was found in Hydra. A remote attacker can intercept and steal committed funds by observing pending deposit transactions on the network. Because the deposit verification logic fails to properly constrain transaction outputs or verify protocol state, an attacker can submit a transaction...

CVE-2026-61847

A flaw was found in crass. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted stylesheet containing a large number of adjacent comments. Because the parser recursively processes comments when discarding them, handling these consecutive comments triggers excessiv...

CVE-2026-61845

A flaw was found in crass. A remote attacker can cause a Denial of Service DoS by submitting specially crafted Cascading Style Sheets CSS inputs containing scientific notation with excessively large exponents. Because crass calculates these exponent values without proper limits, processing the...

CVE-2026-84243

A flaw was found in glibc. The library's localization functions fail to properly sanitize directory traversal characters within the LANGUAGE environment variable. A local attacker capable of setting this variable across trust boundaries can force a target program to load a malicious translation...

CVE-2026-116958

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing...

CVE-2026-119720

A flaw was found in Blender. An attacker can entice a user to open a specially crafted .blend file containing a truncated data block. Because the application reads this block without validating its declared length, it triggers an out-of-bounds read operation, leading to an application crash and...

CVE-2026-119721

A flaw was found in Blender. This issue occurs when reading project data blocks due to missing length validation, resulting in an out-of-bounds read. By tricking a user into opening, browsing, or appending data from a specially crafted Blender file .blend, an attacker can trigger this...

CVE-2026-118023

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Graphics: WebRender component...

CVE-2026-105924

A flaw was found in Qt. This vulnerability allows an attacker to trigger a Denial of Service DoS by providing specially crafted Concise Binary Object Representation CBOR data. When the application converts this input into JavaScript Object Notation JSON format using QCborValue, a NULL pointer...

CVE-2026-104063

A flaw was found in Scribus. When decoding planar pixel data in the Mac PICT image loader, the application does not properly validate image dimensions, leading to an out-of-bounds read vulnerability. By convincing a user to import or open a specially crafted PICT file, an attacker can trigger an...

CVE-2026-116086

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directly into data queries without adequate sanitization,...

CVE-2026-114217

A flaw was found in konflux-ci. Continuous Integration CI automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read these stored credentials to gain unauthorized reposito...

CVE-2026-117681

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

CVE-2026-116964

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery CI/CD workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest...

CVE-2026-119722

A flaw was found in Blender. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted project file. Because the application fails to properly validate structure sizes during file parsing, memory...

CVE-2026-111487

A flaw was found in the Qt3D module of the Qt framework. An out-of-bounds write vulnerability in the assimp scene import plugin allows an attacker to execute arbitrary code or cause a denial of service DoS. By tricking a user into opening a specially crafted 3D scene file, an attacker can corrupt...

CVE-2026-119719

A flaw was found in Blender. This vulnerability may allow arbitrary code execution or cause an application crash resulting in a Denial of Service DoS. By convincing a user to preview a specially crafted blend file with invalid image dimensions, an attacker can trigger an integer overflow in the...

CVE-2026-119718

A flaw was found in Blender. An integer overflow issue in the point cache allocation function ptcachedataalloc leads to a heap-based buffer overflow when reading point cache data. An attacker could exploit this vulnerability by convincing a user to load a specially crafted point cache file...

CVE-2026-119197

A flaw was found in pyasn1. A remote attacker can exploit this vulnerability by submitting specially crafted Abstract Syntax Notation One ASN.1 data containing a binary-encoded floating-point REAL value with a large mantissa. Processing this input leads to quadratic decoding time and excessive CP...

CVE-2026-61627

A flaw was found in libass. An attacker could exploit this vulnerability by enticing a user to process a specially crafted subtitle file, triggering an out-of-bounds write during line measurement. Successful exploitation may result in arbitrary code execution or cause an application crash leading...

CVE-2026-19773

A flaw was found in libwebsockets. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specially crafted HTTP/2 network traffic. The issue occurs due to improper input validation during the parsing of path headers compressed with HPACK a...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2026-104064

A flaw was found in Scribus. An integer overflow in the Tagged Image File Format TIFF loader allows an attacker to trigger a heap buffer overflow by convincing a user to import a maliciously crafted TIFF image with oversized tile dimensions. Successful exploitation could allow arbitrary code...

CVE-2026-104061

A flaw was found in Scribus. This vulnerability allows arbitrary code execution or a Denial of Service DoS due to an out-of-bounds memory write in the Photoshop Document PSD image loader. An attacker could exploit this flaw by convincing a user to import or open a specially crafted PSD file,...

CVE-2026-104066

A flaw was found in Scribus. By tricking a user into importing or placing a specially crafted Macintosh Picture PICT image file with inconsistent dimension data, an attacker can trigger a heap-based buffer overflow during pixel unpacking. This flaw can allow an attacker to achieve arbitrary code...

CVE-2026-104067

A flaw was found in Scribus. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to an application crash. The StarView Metafile SVM import plugin fails to verify that bitmap and transparency mask dimensions match when processing files. An attacker could exploit...

CVE-2026-104062

A flaw was found in Scribus. This flaw allows an attacker to achieve arbitrary code execution or cause a denial of service DoS by convincing a user to open or import a specially crafted PICT image file. The issue occurs due to improper boundary checks in the PICT image loader and import plugin,...

CVE-2026-119602

A flaw was found in libmspack. The MS-ZIP decompressor fails to properly validate back-reference distances when decompressing cabinet CAB archive files. By providing a specially crafted archive whose initial block starts with a back-reference, an attacker can cause the extraction routine to copy...

CVE-2026-118015

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-119428

A flaw was found in phpMyAdmin. This Server-Side Request Forgery SSRF vulnerability allows an unauthenticated remote attacker to trigger outbound network connections by submitting custom host and port values to the setup validation script. By inspecting the returned connection error messages, an...

CVE-2026-119567

A flaw was found in vsftpd. This vulnerability allows an authenticated remote attacker to bypass access control restrictions and execute denied operations. Because the service performs exact string matching against restricted command names without accounting for legacy command aliases defined in...

CVE-2026-73179

A flaw was found in Apache CXF. The OAuth2 authorization service fails to properly enforce single-use authorization code restrictions due to a race condition during database operations. A remote attacker can exploit this flaw by submitting concurrent token exchange requests, allowing them to obta...

CVE-2026-100074

A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF subsystem. The BPF Type Format BTF validator failed to enforce that reference count bpfrefcount fields are unique within data structures. A local user with permissions to load eBPF programs could exploit this flaw by...

CVE-2026-97452

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface Component Architecture ACPICA. When copying internal ACPI objects, the system improperly attempts to update reference counts for objects that do not maintain valid pointers. A local user capable of invoking...