[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Nov 2 07:15:14 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a193801a by security tracker role at 2026-11-02T07:14:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,361 @@
+CVE-2026-95863 (Improper neutralization of input during web page generation in Apache ...)
+ TODO: check
+CVE-2026-87718 (Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Secur ...)
+ TODO: check
+CVE-2026-84231 (Improper neutralization of input during web page generation in Apache ...)
+ TODO: check
+CVE-2026-84177 (Incorrect behavior order in Apache Wicket: a file path is validated be ...)
+ TODO: check
+CVE-2026-84172 (Files accessible to external parties in Apache Wicket. org.apache.wic ...)
+ TODO: check
+CVE-2026-84170 (Allocation of resources without limits or throttling in Apache Wicket. ...)
+ TODO: check
+CVE-2026-83594 (Memory allocation with an excessive size value in Apache Wicket. org. ...)
+ TODO: check
+CVE-2026-83559 (Improper encoding or escaping of output in Apache Wicket. org.apache. ...)
+ TODO: check
+CVE-2026-83539 (Improper neutralization of input during web page generation in Apache ...)
+ TODO: check
+CVE-2026-82956 (Improper neutralization of input during web page generation in Apache ...)
+ TODO: check
+CVE-2026-82898 (Incorrect order of security checks in Apache Wicket. org.apache.wicke ...)
+ TODO: check
+CVE-2026-82840 (Session fixation in Apache Wicket. org.apache.wicket.authroles.authen ...)
+ TODO: check
+CVE-2026-82705 (Missing authorization in Apache Wicket. org.apache.wicket.authorizati ...)
+ TODO: check
+CVE-2026-82704 (Missing authorization in Apache Wicket. org.apache.wicket.core.reques ...)
+ TODO: check
+CVE-2026-82559 (Insufficient session expiration in Apache Wicket. org.apache.wicket.p ...)
+ TODO: check
+CVE-2026-82558 (Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws ...)
+ TODO: check
+CVE-2026-82557 (Missing authorization in Apache Wicket. org.apache.wicket.markup.html ...)
+ TODO: check
+CVE-2026-82115 (Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws ...)
+ TODO: check
+CVE-2026-68591 (In Modem, there is a possible escalation of privilege due to a permiss ...)
+ TODO: check
+CVE-2026-68590 (In ip_stack, there is a possible out of bounds read due to improper in ...)
+ TODO: check
+CVE-2026-68589 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-68588 (In Modem, there is a possible way (for XXX) to XXXXX due to an integer ...)
+ TODO: check
+CVE-2026-66570 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-62048 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-20600 (In Modem, there is a possible application crash due to a logic error. ...)
+ TODO: check
+CVE-2026-20599 (In Modem, there is a possible escalation of privilege due to a missing ...)
+ TODO: check
+CVE-2026-20598 (In Modem, there is a possible out of bounds read due to an integer ove ...)
+ TODO: check
+CVE-2026-20597 (In Modem, there is a possible out of bounds read due to a missing boun ...)
+ TODO: check
+CVE-2026-20596 (In Modem, there is a possible out of bounds read due to improper input ...)
+ TODO: check
+CVE-2026-20595 (In neuropilot, there is a possible out of bounds write due to a missin ...)
+ TODO: check
+CVE-2026-20594 (In Modem, there is a possible out of bounds read due to a missing boun ...)
+ TODO: check
+CVE-2026-20593 (In Modem, there is a possible application crash due to improper input ...)
+ TODO: check
+CVE-2026-20592 (In Modem, there is a possible information disclosure due to side chann ...)
+ TODO: check
+CVE-2026-20591 (In GPU pdma, there is a possible escalation of privilege due to a miss ...)
+ TODO: check
+CVE-2026-20590 (In display, there is a possible system crash due to a logic error. Thi ...)
+ TODO: check
+CVE-2026-20585 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20584 (In usb, there is a possible memory corruption due to a missing bounds ...)
+ TODO: check
+CVE-2026-20583 (In usb, there is a possible system crash due to use after free. This c ...)
+ TODO: check
+CVE-2026-20582 (In usb, there is a possible memory corruption due to double free. This ...)
+ TODO: check
+CVE-2026-20581 (In usb, there is a possible memory corruption due to use after free. T ...)
+ TODO: check
+CVE-2026-20580 (In usb, there is a possible system crash due to use after free. This c ...)
+ TODO: check
+CVE-2026-20578 (In Modem, there is a possible information disclosure due to side chann ...)
+ TODO: check
+CVE-2026-20577 (In Modem, there is a possible permission bypass due to a permissions b ...)
+ TODO: check
+CVE-2026-20576 (In afe, there is a possible out of bounds write due to a missing bound ...)
+ TODO: check
+CVE-2026-20575 (In afe, there is a possible memory corruption due to use after free. T ...)
+ TODO: check
+CVE-2026-20574 (In afe, there is a possible memory corruption due to use after free. T ...)
+ TODO: check
+CVE-2026-20573 (In afe, there is a possible memory corruption due to double free. This ...)
+ TODO: check
+CVE-2026-20572 (In adsp, there is a possible out of bounds write due to an integer ove ...)
+ TODO: check
+CVE-2026-20571 (In afe, there is a possible memory corruption due to use after free. T ...)
+ TODO: check
+CVE-2026-20570 (In adsp, there is a possible escalation of privilege due to use after ...)
+ TODO: check
+CVE-2026-20569 (In adsp, there is a possible memory corruption due to use after free. ...)
+ TODO: check
+CVE-2026-20568 (In afe, there is a possible system crash due to use after free. This c ...)
+ TODO: check
+CVE-2026-20567 (In afe, there is a possible out of bounds write due to a missing bound ...)
+ TODO: check
+CVE-2026-20566 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20565 (In Modem, there is a possible out of bounds write due to an incorrect ...)
+ TODO: check
+CVE-2026-20564 (In Modem, there is a possible out of bounds write due to an incorrect ...)
+ TODO: check
+CVE-2026-20563 (In Modem, there is a possible out of bounds write due to an incorrect ...)
+ TODO: check
+CVE-2026-20562 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20561 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20560 (In Modem, there is a possible system crash due to improper input valid ...)
+ TODO: check
+CVE-2026-20559 (In GPU pdma, there is a possible memory corruption due to use after fr ...)
+ TODO: check
+CVE-2026-20558 (In GPU pdma, there is a possible escalation of privilege due to use af ...)
+ TODO: check
+CVE-2026-20557 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20556 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20555 (In Modem, there is a possible out of bounds read due to a missing boun ...)
+ TODO: check
+CVE-2026-20554 (In Modem, there is a possible system crash due to a missing bounds che ...)
+ TODO: check
+CVE-2026-20553 (In DA, there is a possible out of bounds write due to a missing bounds ...)
+ TODO: check
+CVE-2026-20552 (In ccci, there is a possible out of bounds write due to a missing boun ...)
+ TODO: check
+CVE-2026-20551 (In gnss, there is a possible out of bounds write due to a missing boun ...)
+ TODO: check
+CVE-2026-20550 (In gnss, there is a possible out of bounds write due to a missing boun ...)
+ TODO: check
+CVE-2026-20549 (In Modem, there is a possible out of bounds write due to improper inpu ...)
+ TODO: check
+CVE-2026-20548 (In Modem, there is a possible out of bounds write due to an integer ov ...)
+ TODO: check
+CVE-2026-20547 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20546 (In Modem, there is a possible out of bounds write due to an incorrect ...)
+ TODO: check
+CVE-2026-20545 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-20499 (In Modem, there is a possible out of bounds write due to a missing bou ...)
+ TODO: check
+CVE-2026-120349 (A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. A ...)
+ TODO: check
+CVE-2026-120348 (A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affect ...)
+ TODO: check
+CVE-2026-120347 (A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affect ...)
+ TODO: check
+CVE-2026-120345 (A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e96 ...)
+ TODO: check
+CVE-2026-120344 (A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-1 ...)
+ TODO: check
+CVE-2026-120343 (A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The ...)
+ TODO: check
+CVE-2026-120342 (A vulnerability was detected in mathurvishal CloudClassroom-PHP-Projec ...)
+ TODO: check
+CVE-2026-120341 (A security vulnerability has been detected in mathurvishal CloudClassr ...)
+ TODO: check
+CVE-2026-120340 (A weakness has been identified in mathurvishal CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-120339 (A security flaw has been discovered in mathurvishal CloudClassroom-PHP ...)
+ TODO: check
+CVE-2026-120338 (Prefab UI's Generative UI sandbox runs caller-supplied Python inside P ...)
+ TODO: check
+CVE-2026-120337 (A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. ...)
+ TODO: check
+CVE-2026-120336 (A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected ...)
+ TODO: check
+CVE-2026-120335 (A vulnerability has been found in deepset-ai farm up to 0.8.0. Affecte ...)
+ TODO: check
+CVE-2026-120334 (A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the ...)
+ TODO: check
+CVE-2026-120325 (A security vulnerability has been detected in Webpro-nl Knip up to 6.4 ...)
+ TODO: check
+CVE-2026-120324 (A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5 ...)
+ TODO: check
+CVE-2026-120323 (A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/ ...)
+ TODO: check
+CVE-2026-120322 (A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This ...)
+ TODO: check
+CVE-2026-120320 (A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This ...)
+ TODO: check
+CVE-2026-120319 (A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affec ...)
+ TODO: check
+CVE-2026-120317 (http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity chec ...)
+ TODO: check
+CVE-2026-120316 (http4k before 6.62.0.0-ee contains a path traversal vulnerability in T ...)
+ TODO: check
+CVE-2026-120315 (LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vuln ...)
+ TODO: check
+CVE-2026-120314 (Network-AI from 5.14.0 before 5.15.5 contains a missing authentication ...)
+ TODO: check
+CVE-2026-120313 (Network-AI before 5.15.5 contains a path traversal vulnerability in In ...)
+ TODO: check
+CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnera ...)
+ TODO: check
+CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnera ...)
+ TODO: check
+CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns st ...)
+ TODO: check
+CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vuln ...)
+ TODO: check
+CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function, endpoint ...)
+ TODO: check
+CVE-2026-120307 (The Beta9 worker serves the sandbox file API from outside the containe ...)
+ TODO: check
+CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition into a Doc ...)
+ TODO: check
+CVE-2026-120283 (A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte ...)
+ TODO: check
+CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507. This imp ...)
+ TODO: check
+CVE-2026-120281 (A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects ...)
+ TODO: check
+CVE-2026-120280 (A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impa ...)
+ TODO: check
+CVE-2026-120279 (A flaw has been found in WAVLINK WN536AX6-A V260507. The affected elem ...)
+ TODO: check
+CVE-2026-120278 (A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impa ...)
+ TODO: check
+CVE-2026-120277 (A security vulnerability has been detected in WAVLINK WN536AX6-A V2605 ...)
+ TODO: check
+CVE-2026-120276 (A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. Th ...)
+ TODO: check
+CVE-2026-120275 (A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technolog ...)
+ TODO: check
+CVE-2026-120274 (A vulnerability was identified in beecue FastBee up to 2.1.0. Affected ...)
+ TODO: check
+CVE-2026-120263 (When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the defau ...)
+ TODO: check
+CVE-2026-120242 (A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P ...)
+ TODO: check
+CVE-2026-120241 (A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG- ...)
+ TODO: check
+CVE-2026-120240 (A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. Thi ...)
+ TODO: check
+CVE-2026-120239 (A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vul ...)
+ TODO: check
+CVE-2026-120238 (A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This ...)
+ TODO: check
+CVE-2026-120237 (A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected b ...)
+ TODO: check
+CVE-2026-120236 (A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Aff ...)
+ TODO: check
+CVE-2026-120235 (A security vulnerability has been detected in ag-ui-protocol ag-ui up ...)
+ TODO: check
+CVE-2026-120234 (A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. T ...)
+ TODO: check
+CVE-2026-120233 (A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0. ...)
+ TODO: check
+CVE-2026-120232 (A vulnerability was identified in Horizon DataSys Reboot Restore Stand ...)
+ TODO: check
+CVE-2026-120231 (A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The ...)
+ TODO: check
+CVE-2026-120230 (A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the f ...)
+ TODO: check
+CVE-2026-120229 (A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This ...)
+ TODO: check
+CVE-2026-120228 (A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnera ...)
+ TODO: check
+CVE-2026-120227 (A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This af ...)
+ TODO: check
+CVE-2026-120226 (A security vulnerability has been detected in Hangzhou Xiongmai Techno ...)
+ TODO: check
+CVE-2026-120225 (A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. ...)
+ TODO: check
+CVE-2026-120224 (A security flaw has been discovered in Oray Pugongying X5 Pro up to 7. ...)
+ TODO: check
+CVE-2026-120223 (A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. ...)
+ TODO: check
+CVE-2026-119627 (The web profile and RSS/Atom feed routes of users and organizations ch ...)
+ TODO: check
+CVE-2026-119625 (The `/{username}` web route accepted personal access tokens over HTTP ...)
+ TODO: check
+CVE-2026-119533 (Repository and organization project boards listed the pull requests th ...)
+ TODO: check
+CVE-2026-119480 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-119441 (`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organ ...)
+ TODO: check
+CVE-2026-118504 (The web interface blocks issue and pull request changes on archived re ...)
+ TODO: check
+CVE-2026-118395 (Gitea 1.27.3 stopped personal access tokens restricted to public resou ...)
+ TODO: check
+CVE-2026-118394 (The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether ...)
+ TODO: check
+CVE-2026-118386 (Workflows triggered by a pull request review were read from the commit ...)
+ TODO: check
+CVE-2026-117685 (The OCI registry's cross-repository blob mount checked the target pack ...)
+ TODO: check
+CVE-2026-117680 (Improper Check for Unusual or Exceptional Conditions vulnerability in ...)
+ TODO: check
+CVE-2026-117677 (When parsing an uploaded Helm chart, Gitea decompressed the archive an ...)
+ TODO: check
+CVE-2026-117649 (The issue timeline API and the web issue page hid cross-reference even ...)
+ TODO: check
+CVE-2026-117646 (The repositories, stars and watching tabs of user profiles and the rep ...)
+ TODO: check
+CVE-2026-117635 (The `/api/v1/admin` route group did not enforce the `public-only` rest ...)
+ TODO: check
+CVE-2026-116474 (The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-a ...)
+ TODO: check
+CVE-2026-116296 (The API routes for releases, release assets, milestones and repository ...)
+ TODO: check
+CVE-2026-116289 (Gitea did not reject personal access tokens restricted to public resou ...)
+ TODO: check
+CVE-2026-114199 (`GET /api/v1/users/{username}/heatmap` computed the contribution heatm ...)
+ TODO: check
+CVE-2026-113429 (Legacy (v1 to v3) Actions artifact uploads stored the request's `Conte ...)
+ TODO: check
+CVE-2026-112887 (Gitea Actions task tokens authenticate to the REST API as a shared sys ...)
+ TODO: check
+CVE-2026-111089 (Apache Wicket reads texts from the application's resource bundles \u20 ...)
+ TODO: check
+CVE-2026-101186 (DoS vulnerability in the window module. Impact: Successful exploitatio ...)
+ TODO: check
+CVE-2026-101185 (OOB read vulnerability in the peripheral module. Impact: Successful ex ...)
+ TODO: check
+CVE-2026-101183 (UAF vulnerability in the location service module. Impact: Successful e ...)
+ TODO: check
+CVE-2026-101182 (Race condition vulnerability in the location service module. Impact: S ...)
+ TODO: check
+CVE-2026-101181 (Permission control vulnerability in the WLAN module. Impact: Successfu ...)
+ TODO: check
+CVE-2026-101180 (DoS vulnerability in the file parsing module. Impact: Successful explo ...)
+ TODO: check
+CVE-2026-101179 (Buffer overflow vulnerability in the file preview module. Impact: Succ ...)
+ TODO: check
+CVE-2026-101177 (Permission control vulnerability in the Optimizer module. Impact: Succ ...)
+ TODO: check
+CVE-2026-101176 (Permission control vulnerability in the event notification management ...)
+ TODO: check
+CVE-2026-101175 (Null pointer dereference vulnerability in the ArkWeb module. Impact: S ...)
+ TODO: check
+CVE-2026-101174 (DoS vulnerability in the DSoftBus module. Impact: Successful exploitat ...)
+ TODO: check
+CVE-2026-101173 (DoS vulnerability in the DSoftBus module. Impact: Successful exploitat ...)
+ TODO: check
+CVE-2026-101172 (Permission control vulnerability in the graphics module.Impact: Succes ...)
+ TODO: check
+CVE-2026-101171 (Permission control vulnerability in the background task management mod ...)
+ TODO: check
+CVE-2026-101170 (DoS vulnerability in the file parsing module. Impact: Successful explo ...)
+ TODO: check
+CVE-2025-11969 (The System REST APIs do not correctly enforce access control mechanism ...)
+ TODO: check
+CVE-2024-5617 (The account lock feature fails to correctly enforce account lockouts o ...)
+ TODO: check
CVE-2026-XXXX [GHSA-c5px-7h4c-gj8p: Remote code execution in C-Kermit]
- ckermit <unfixed>
NOTE: https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p
@@ -7,9 +365,9 @@ CVE-2026-XXXX [GHSA-5pc4-gh6q-5h4w: Authentication bypass and TLS certificate sp
CVE-2026-XXXX [GHSA-vhrv-7jrq-95qj: Arbitrary file write and safeguard bypass during file transfers]
- ckermit <unfixed>
NOTE: https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj
-CVE-2026-74760
+CVE-2026-74760 (Google::Auth versions from 0.11 through 0.12 for Perl accept an author ...)
NOT-FOR-US: Google::Auth Perl module
-CVE-2026-74759
+CVE-2026-74759 (Google::Auth versions 0.12 for Perl allow server side request forgery ...)
NOT-FOR-US: Google::Auth Perl module
CVE-2026-XXXX [GHSA-7pq7-3pmj-9wp6: Union-mode checkout follows an attacker-planted symlink and writes outside the destination]
- ostree 2026.6-1
@@ -62,7 +420,7 @@ CVE-2026-XXXX [GHSA-pfcm-ffqg-84hx]
CVE-2026-XXXX [GHSA-gff5-3vgr-p8h2]
- libheif <unfixed>
NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-gff5-3vgr-p8h2
-CVE-2026-13575
+CVE-2026-13575 (HTTP::Session versions before 0.54 for Perl allow memcached command in ...)
NOT-FOR-US: HTTP::Session Perl module
CVE-2026-111426
- kdeconnect <unfixed> (bug #1152780)
@@ -837,7 +1195,7 @@ CVE-2026-39786 (Unauthenticated Cross Site Scripting (XSS) in BA Book Everything
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39739 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-39738 (Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6 ...)
+CVE-2026-39738 (Deserialization of Untrusted Data vulnerability in Aman FunnelKit Auto ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39734 (Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -847,7 +1205,7 @@ CVE-2026-39375 (Frappe Learning Management System (LMS) is a learning system tha
NOT-FOR-US: Frappe
CVE-2026-37468 (Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11 ...)
NOT-FOR-US: MyBeeHome
-CVE-2026-28160 (Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 ver ...)
+CVE-2026-28160 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27061 (Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 ve ...)
NOT-FOR-US: WordPress plugin or theme
@@ -5238,170 +5596,170 @@ CVE-2026-118370 (libexpat through 2.9.0 contains a signed integer overflow vulne
- expat <unfixed> (bug #1152337)
NOTE: https://github.com/libexpat/libexpat/pull/1450
CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118355 (Improper input validation in Command in Google Chrome prior to 156.0.8 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118353 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allow ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118344 (Use after free in Layout in Google Chrome prior to 156.0.8078.73 allow ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome prior to 156 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to 156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118339 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118338 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to 156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior to 156.0. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on Mac prior ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118332 (Improper input validation in Compositing in Google Chrome prior to 156 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior to 156.0.8 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows prior to 156. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac prior to ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to 156.0.80 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118321 (Improper input validation in Core in Google Chrome on on Android prior ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to 156.0.8078.7 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118314 (Improper input validation in UI in Google Chrome on on Android prior t ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118313 (Use after free in Video in Google Chrome prior to 156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118310 (Improper input validation in Views in Google Chrome on on Windows prio ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118309 (Improper input validation in UI in Google Chrome on on Android prior t ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118307 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.7 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This ...)
NOT-FOR-US: a2ui-project a2ui
@@ -6005,31 +6363,31 @@ CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat allows
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission to uplo ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the homeserver a ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118180
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID made Thun ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118179
CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or newLocation ele ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118178
CVE-2026-118177 (When looking for calendars in a directory on a server, during account ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118177
CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from accessing files o ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118176
CVE-2026-118175 (When replying to, forwarding, or editing a crafted email message as ne ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118175
CVE-2026-118174 (When a message containing an OpenPGP key attachment was displayed, Thu ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118174
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP feed data, ...)
@@ -6113,7 +6471,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnera
- firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6121,7 +6479,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animat
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6129,7 +6487,7 @@ CVE-2026-118003 (Information disclosure in the Networking: DNS component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6137,7 +6495,7 @@ CVE-2026-118002 (Information disclosure due to race condition in the Networking
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6145,7 +6503,7 @@ CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6153,7 +6511,7 @@ CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6161,7 +6519,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6169,7 +6527,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6177,7 +6535,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6185,7 +6543,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6193,7 +6551,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6201,7 +6559,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6209,7 +6567,7 @@ CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6217,7 +6575,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6225,7 +6583,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6233,7 +6591,7 @@ CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6241,7 +6599,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6249,7 +6607,7 @@ CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6257,7 +6615,7 @@ CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6265,7 +6623,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6273,7 +6631,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Over
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6281,7 +6639,7 @@ CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6289,7 +6647,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6297,7 +6655,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerabili
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6305,7 +6663,7 @@ CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6313,7 +6671,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender compon
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6321,7 +6679,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6329,7 +6687,7 @@ CVE-2026-117977 (Other issue in the Console component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6337,7 +6695,7 @@ CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6345,7 +6703,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRende
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6353,7 +6711,7 @@ CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6361,7 +6719,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6369,7 +6727,7 @@ CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6377,7 +6735,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6385,7 +6743,7 @@ CVE-2026-117970 (Race condition in the Disability Access APIs component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6393,7 +6751,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6401,7 +6759,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6409,7 +6767,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6417,7 +6775,7 @@ CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6425,7 +6783,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6433,7 +6791,7 @@ CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulne
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6441,7 +6799,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6449,7 +6807,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Stor
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6457,7 +6815,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6465,7 +6823,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6473,7 +6831,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6481,7 +6839,7 @@ CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6489,7 +6847,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6497,7 +6855,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6505,7 +6863,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6513,7 +6871,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6521,7 +6879,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6529,7 +6887,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6537,7 +6895,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6545,7 +6903,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6553,7 +6911,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6561,7 +6919,7 @@ CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6569,7 +6927,7 @@ CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6577,7 +6935,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6585,7 +6943,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6593,7 +6951,7 @@ CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6601,7 +6959,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6609,7 +6967,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6617,7 +6975,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6625,7 +6983,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6633,7 +6991,7 @@ CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6641,7 +6999,7 @@ CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6649,7 +7007,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6657,7 +7015,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6665,7 +7023,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6673,7 +7031,7 @@ CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6681,7 +7039,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6689,7 +7047,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6697,7 +7055,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6705,7 +7063,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6713,7 +7071,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6721,7 +7079,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6729,7 +7087,7 @@ CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6737,7 +7095,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6745,7 +7103,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6753,7 +7111,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6761,7 +7119,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6769,7 +7127,7 @@ CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6777,7 +7135,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6785,7 +7143,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6793,7 +7151,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6801,7 +7159,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6809,7 +7167,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6817,7 +7175,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6825,7 +7183,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline c
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6833,7 +7191,7 @@ CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6841,7 +7199,7 @@ CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6849,7 +7207,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6857,7 +7215,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6865,7 +7223,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6873,7 +7231,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6881,7 +7239,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6889,7 +7247,7 @@ CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6897,7 +7255,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6905,7 +7263,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6913,7 +7271,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6921,7 +7279,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6929,7 +7287,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6937,7 +7295,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6945,7 +7303,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6953,7 +7311,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6961,7 +7319,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6969,7 +7327,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6977,7 +7335,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6985,7 +7343,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6993,7 +7351,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7001,7 +7359,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7009,7 +7367,7 @@ CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Netwo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7017,7 +7375,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7025,7 +7383,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7033,7 +7391,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7041,7 +7399,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7049,7 +7407,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7057,7 +7415,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7065,7 +7423,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7073,7 +7431,7 @@ CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7081,7 +7439,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7089,7 +7447,7 @@ CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7097,7 +7455,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7105,7 +7463,7 @@ CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7113,7 +7471,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7121,7 +7479,7 @@ CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7129,7 +7487,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7137,7 +7495,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7145,7 +7503,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7153,7 +7511,7 @@ CVE-2026-117874 (Use-after-free in the Internationalization component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7161,7 +7519,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback comp
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7169,7 +7527,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7177,7 +7535,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability w
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7185,7 +7543,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnera
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7193,7 +7551,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7201,7 +7559,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7209,7 +7567,7 @@ CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7217,7 +7575,7 @@ CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Can
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7225,7 +7583,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7233,7 +7591,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7241,7 +7599,7 @@ CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7249,7 +7607,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7257,7 +7615,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -37085,7 +37443,7 @@ CVE-2026-118475 (A flaw was found in Eye of GNOME. When parsing a specially craf
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a (50.4)
CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow e ...)
- {DLA-4874-1}
+ {DSA-6601-1 DLA-4874-1}
- eog 50.4-1 (bug #1150455)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
@@ -76442,7 +76800,7 @@ CVE-2026-81801 (Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81800 (Unauthenticated SQL Injection in Verified Reviews (Avis V\xe9rifi\xe9s ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-81799 (Unauthenticated Broken Access Control in Return Refund and Exchange Fo ...)
+CVE-2026-81799 (Missing Authorization vulnerability in WP Swings Return Refund and Exc ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81796 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
NOT-FOR-US: WordPress plugin or theme
@@ -104378,6 +104736,7 @@ CVE-2026-73187 (Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 ver
CVE-2026-73181 (Unauthenticated Arbitrary File Download in Extra Product Options & Add ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-73073 (Vim is an open source, command line text editor. Prior to 9.2.0845, St ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g
NOTE: Fixed by: https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f (v9.2.0845)
@@ -114735,14 +115094,17 @@ CVE-2026-73080 (SeaweedFS is a distributed storage system. Prior to 4.24, Volume
CVE-2026-73079 (Sub2API is an AI API gateway platform designed to distribute and manag ...)
NOT-FOR-US: Sub2API
CVE-2026-73078 (Vim is an open source, command line text editor. Prior to 9.2.0840, ru ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2
NOTE: Fixed by: https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69 (v9.2.0840)
CVE-2026-73077 (Vim is an open source, command line text editor. Prior to 9.2.0839, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2
NOTE: Fixed by: https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e (v9.2.0839)
CVE-2026-73076 (Vim is an open source, command line text editor. Prior to 9.2.0847, ru ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2
NOTE: Fixed by: https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452 (v9.2.0847)
@@ -114757,6 +115119,7 @@ CVE-2026-73074 (Vim is an open source, command line text editor. Prior to 9.2.08
NOTE: https://github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j
NOTE: Fixed by: https://github.com/vim/vim/commit/a9336b476fd1a182e3f79b5f83c0ffb04f8a922b (v9.2.0841)
CVE-2026-73072 (Vim is an open source, command line text editor. Prior to 9.2.0846, se ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64
NOTE: Fixed by: https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a (v9.2.0846)
@@ -147399,14 +147762,17 @@ CVE-2026-60120 (Bagisto before 2.4.4 contains a stored cross-site scripting vuln
CVE-2026-5069 (The Fluent Forms plugin for WordPress is vulnerable to incorrect autho ...)
NOT-FOR-US: WordPress plugin
CVE-2026-59858 (Vim is an open source, command line text editor. Prior to 9.2.0735, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x
NOTE: Fixed by: https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e (v9.2.0735)
CVE-2026-59857 (Vim is an open source, command line text editor. Prior to 9.2.0725, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2
NOTE: Fixed by: https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30 (9.2.0725)
CVE-2026-59856 (Vim is an open source, command line text editor. Prior to 9.2.0736, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97
NOTE: Fixed by: https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24 (v9.2.0736)
@@ -158255,10 +158621,12 @@ CVE-2026-57533 (Malicious HTML content could be injected into the page pretix sh
CVE-2026-57532 (Malicious HTML content contained in the layout specification of a PDF ...)
NOT-FOR-US: rami.io products
CVE-2026-57456 (Vim is an open source, command line text editor. Prior to 9.2.0699, Vi ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3
NOTE: Fixed by: https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8 (v9.2.0699)
CVE-2026-57455 (Vim is an open source, command line text editor. Prior to 9.2.0698, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4
NOTE: Fixed by: https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b (v9.2.0698)
@@ -158279,6 +158647,7 @@ CVE-2026-57453 (Vim is an open source, command line text editor. From 9.1.1784 u
NOTE: Fixed by: https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a994c7e517c73f4a9 (v9.2.0678)
NOTE: Only an issue in compbination with executing PowerShell
CVE-2026-57452 (Vim is an open source, command line text editor. Prior to 9.2.0671, wh ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486
NOTE: Fixed by: https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f (v9.2.0671)
@@ -158444,10 +158813,12 @@ CVE-2026-55961 (wolfSSL_PKCS7_verify() returning success for a degenerate (certs
[bullseye] - wolfssl <postponed> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55895 (Vim is an open source, command line text editor. Prior to 9.2.0663, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh
NOTE: Fixed by: https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2 (v9.2.0663)
CVE-2026-55892 (Vim is an open source, command line text editor. Prior to 9.2.0662, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h
NOTE: Fixed by: https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241fc8633d93dff996b (v9.2.0662)
@@ -158460,6 +158831,7 @@ CVE-2026-55698 (pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can
CVE-2026-55697 (pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can insta ...)
- pnpm <itp> (bug #985669)
CVE-2026-55693 (Vim is an open source, command line text editor. Prior to 9.2.0653, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq
NOTE: Fixed by: https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7 (v9.2.0653)
@@ -168727,15 +169099,18 @@ CVE-2026-53460 (ImageMagick is free and open-source software used for editing an
CVE-2026-53423 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
NOT-FOR-US: membraneframework membrane_mp4_plugin
CVE-2026-52860 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139730)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468
NOTE: Fixed by: https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2 (v9.2.0597)
CVE-2026-52859 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139729; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm
NOTE: Fixed by: https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19 (v9.2.0565)
NOTE: Crash in CLI tool, no security impact
CVE-2026-52858 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139728)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c
NOTE: Fixed by: https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d (v9.2.0561)
@@ -168840,12 +169215,14 @@ CVE-2026-47170 (Garlic-Hub manages digital signage network \u2014 devices, conte
CVE-2026-47169 (Quest Bot is an opensource modern Discord Bot built for moderation, ut ...)
NOT-FOR-US: Quest Bot
CVE-2026-47167 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9
NOTE: Fixed by: https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934 (v9.2.0496)
CVE-2026-47163 (Quest Bot is an opensource modern Discord Bot built for moderation, ut ...)
NOT-FOR-US: Quest Bot
CVE-2026-47162 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c
NOTE: Fixed by: https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b (v9.2.0495)
@@ -187893,6 +188270,7 @@ CVE-2026-4053 (Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to
CVE-2026-46508 (Turborepo is a high-performance build system for JavaScript and TypeSc ...)
NOT-FOR-US: Turborepo
CVE-2026-46483 (Vim is an open source, command line text editor. Prior to 9.2.0479, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1 (bug #1136803)
[bookworm] - vim <no-dsa> (Minor issue)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w
@@ -188819,6 +189197,7 @@ CVE-2026-8587 (Use after free in Extensions in Google Chrome on Mac prior to 148
- chromium 148.0.7778.167-1
[bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-43961 (A flaw was found in Vim's netrw plugin. A crafted filename containing ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1 (bug #1136828)
NOTE: https://www.openwall.com/lists/oss-security/2026/05/14/7
NOTE: https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3
@@ -192784,6 +193163,7 @@ CVE-2026-6664 (An integer overflow in network packet parsing code in PgBouncer b
[bullseye] - pgbouncer <postponed> (Minor issue, DoS)
NOTE: Fixed by: https://github.com/pgbouncer/pgbouncer/commit/ddc63c2175825bca9ef3c0a528280acaad76dbaa (pgbouncer_1_25_2)
CVE-2026-45130 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0461-1 (bug #1136097)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv
NOTE: Fixed by: https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8 (v9.2.0450)
@@ -192792,6 +193172,7 @@ CVE-2026-44987 (SysReptor is a fully customizable pentest reporting platform. Pr
CVE-2026-44694 (n8n-MCP is an MCP server that provides AI assistants access to n8n nod ...)
NOT-FOR-US: n8n-MCP
CVE-2026-44656 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0461-1 (bug #1136086)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg
NOTE: Fixed by: https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0 (v9.2.0435)
@@ -192870,6 +193251,7 @@ CVE-2026-42308 (Pillow is a Python imaging library. Prior to version 12.2.0, if
NOTE: https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j
TODO: research fixing commit(s), maybe https://github.com/python-pillow/Pillow/pull/9518/changes
CVE-2026-42307 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0428-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-85ch-p2qr-m5gx
NOTE: Fixed by: https://github.com/vim/vim/commit/405e2fb6d54d5653523809e2853d99d1c000a5fc (v9.2.0383)
@@ -201500,7 +201882,7 @@ CVE-2026-41604 (Out-of-bounds Read vulnerability in Apache Thrift. This issue a
NOTE: swift bindings not built in Debian package
CVE-2026-7234 (A weakness has been identified in BrowserOperator browser-operator-cor ...)
NOT-FOR-US: BrowserOperator browser-operator-core
-CVE-2026-7233 (A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impa ...)
+CVE-2026-7233 (A vulnerability was determined in Artifex MuPDF. The impacted element ...)
- mupdf <unfixed> (bug #1135372)
[trixie] - mupdf <no-dsa> (Minor issue)
[bookworm] - mupdf <no-dsa> (Minor issue)
@@ -202546,6 +202928,7 @@ CVE-2026-41414 (Skim is a fuzzy finder designed to through files, lines, and com
NOTE: https://github.com/skim-rs/skim/security/advisories/GHSA-9g93-rxr5-xhqw
NOTE: https://github.com/skim-rs/skim/commit/bf63404ad51985b00ed304690ba9d477860a5a75
CVE-2026-41411 (Vim is an open source, command line text editor. Prior to 9.2.0357, A ...)
+ {DSA-6600-1}
- vim 2:9.2.0428-1 (bug #1134906)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8
NOTE: https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb (v9.2.0357)
@@ -212543,6 +212926,7 @@ CVE-2026-31411 (In the Linux kernel, the following vulnerability has been resolv
- linux 6.18.14-1
NOTE: https://git.kernel.org/linus/ae88a5d2f29b69819dc7b04086734439d074a643 (7.0-rc1)
CVE-2026-39881 (Vim is an open source, command line text editor. Prior to 9.2.0316, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0338-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6
NOTE: Fixed by: https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4 (v9.2.0316)
@@ -213824,6 +214208,7 @@ CVE-2026-35470 (OpenSTAManager is an open source management software for technic
CVE-2026-35209 (defu is software that allows uers to assign default properties recursi ...)
NOT-FOR-US: defu
CVE-2026-35177 (Vim is an open source, command line text editor. Prior to 9.2.0280, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0315-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24
NOTE: Fixed by: https://github.com/vim/vim/commit/7088926316d8d4a7572a242d0765e99adfc8b083 (v9.2.0280)
@@ -216622,6 +217007,7 @@ CVE-2026-23401 (In the Linux kernel, the following vulnerability has been resolv
[bullseye] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/aad885e774966e97b675dfe928da164214a71605 (7.0-rc6)
CVE-2026-34982 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0315-1 (bug #1132450)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9
NOTE: Fixed by: https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615f13a7de44c0587 (v9.2.0276)
@@ -224285,6 +224671,7 @@ CVE-2026-22731 (Spring Boot applications with Actuator can be vulnerable to an "
CVE-2026-21992 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-33412 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0218-1 (bug #1131450)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c
NOTE: https://github.com/vim/vim/pull/19746
@@ -227181,6 +227568,7 @@ CVE-2026-32259 (ImageMagick is free and open-source software used for editing an
CVE-2026-32251 (Tolgee is an open-source localization platform. Prior to 3.166.3, the ...)
NOT-FOR-US: Tolgee
CVE-2026-32249 (Vim is an open source, command line text editor. From 9.1.0011 to befo ...)
+ {DSA-6600-1}
- vim 2:9.2.0218-1 (bug #1130658; unimportant)
[bookworm] - vim <not-affected> (Vulnerable code not present)
[bullseye] - vim <not-affected> (Vulnerable code not present)
@@ -233036,19 +233424,23 @@ CVE-2026-28424 (Statmatic is a Laravel and Git powered content management system
CVE-2026-28423 (Statmatic is a Laravel and Git powered content management system (CMS) ...)
NOT-FOR-US: Statmatic CMS
CVE-2026-28422 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129432; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf
NOTE: Fixed by: https://github.com/vim/vim/commit/4e5b9e31cb7484ad156fba995fdce3c9b075b5fd (v9.2.0078)
NOTE: Crash in CLI tool, no security impact
CVE-2026-28421 (Vim is an open source, command line text editor. Versions prior to 9.2 ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129431)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p
NOTE: Fixed by: https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3 (v9.2.0077)
CVE-2026-28420 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129430)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg
NOTE: Fixed by: https://github.com/vim/vim/commit/bb6de2105b160e729c340631435cd62f3e69bd32 (v9.2.0076)
CVE-2026-28419 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129429; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv
NOTE: Fixed by: https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0 (v9.2.0075)
@@ -233112,10 +233504,12 @@ CVE-2026-1542 (The Super Stage WP WordPress plugin through 1.0.1 unserializes us
CVE-2025-13673 (The Tutor LMS \u2013 eLearning and online course solution plugin for W ...)
NOT-FOR-US: WordPress plugin
CVE-2026-28418 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129428)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-h4mf-vg97-hj8j
NOTE: Fixed by: https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb46c3a9e76f684da2d (v9.2.0074)
CVE-2026-28417 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129427)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336
NOTE: Fixed by: https://github.com/vim/vim/commit/79348dbbc09332130f4c86045e1541d68514fcc1 (v9.2.0073)
@@ -239698,6 +240092,7 @@ CVE-2026-2443 (A flaw was identified in libsoup, a widely used HTTP library in G
CVE-2026-2026 (A vulnerability has been identified where weak file permissions in the ...)
NOT-FOR-US: Tenable
CVE-2026-26269 (Vim is an open source, command line text editor. Prior to 9.1.2148, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1127930)
[bookworm] - vim <no-dsa> (Minor issue)
[bullseye] - vim <postponed> (Minor issue, requires launching vim with netbeans integration enabled)
@@ -242411,6 +242806,7 @@ CVE-2026-25757 (Spree is an open source e-commerce solution built with Ruby on R
CVE-2026-25754 (AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 ...)
NOT-FOR-US: AdonisJS
CVE-2026-25749 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
+ {DSA-6600-1}
- vim 2:9.1.2141-1
[bookworm] - vim <no-dsa> (Minor issue)
[bullseye] - vim <postponed> (Minor issue)
@@ -317776,6 +318172,7 @@ CVE-2025-2800 (The WP Event Manager \u2013 Events Calendar, Registrations, Sell
CVE-2025-2799 (The WP Event Manager \u2013 Events Calendar, Registrations, Sell Ticke ...)
NOT-FOR-US: WordPress plugin
CVE-2025-53906 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
+ {DSA-6600-1}
[experimental] - vim 2:9.1.1766-1
- vim 2:9.1.1829-1 (bug #1109374)
[bookworm] - vim <no-dsa> (Minor issue)
@@ -317784,6 +318181,7 @@ CVE-2025-53906 (Vim is an open source, command line text editor. Prior to versio
NOTE: https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 (v9.1.1551)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86
CVE-2025-53905 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
+ {DSA-6600-1}
[experimental] - vim 2:9.1.1766-1
- vim 2:9.1.1829-1 (bug #1109374)
[bookworm] - vim <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a193801ae25939a10b7d834021c1dabedc6bd66b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a193801ae25939a10b7d834021c1dabedc6bd66b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/eeac47be/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list