Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a193801a by security tracker role at 2026-11-02T07:14:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,361 @@
+CVE-2026-95863 (Improper neutralization of input during web page generation in
Apache ...)
+ TODO: check
+CVE-2026-87718 (Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the
Content-Secur ...)
+ TODO: check
+CVE-2026-84231 (Improper neutralization of input during web page generation in
Apache ...)
+ TODO: check
+CVE-2026-84177 (Incorrect behavior order in Apache Wicket: a file path is
validated be ...)
+ TODO: check
+CVE-2026-84172 (Files accessible to external parties in Apache Wicket.
org.apache.wic ...)
+ TODO: check
+CVE-2026-84170 (Allocation of resources without limits or throttling in Apache
Wicket. ...)
+ TODO: check
+CVE-2026-83594 (Memory allocation with an excessive size value in Apache
Wicket. org. ...)
+ TODO: check
+CVE-2026-83559 (Improper encoding or escaping of output in Apache Wicket.
org.apache. ...)
+ TODO: check
+CVE-2026-83539 (Improper neutralization of input during web page generation in
Apache ...)
+ TODO: check
+CVE-2026-82956 (Improper neutralization of input during web page generation in
Apache ...)
+ TODO: check
+CVE-2026-82898 (Incorrect order of security checks in Apache Wicket.
org.apache.wicke ...)
+ TODO: check
+CVE-2026-82840 (Session fixation in Apache Wicket.
org.apache.wicket.authroles.authen ...)
+ TODO: check
+CVE-2026-82705 (Missing authorization in Apache Wicket.
org.apache.wicket.authorizati ...)
+ TODO: check
+CVE-2026-82704 (Missing authorization in Apache Wicket.
org.apache.wicket.core.reques ...)
+ TODO: check
+CVE-2026-82559 (Insufficient session expiration in Apache Wicket.
org.apache.wicket.p ...)
+ TODO: check
+CVE-2026-82558 (Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws ...)
+ TODO: check
+CVE-2026-82557 (Missing authorization in Apache Wicket.
org.apache.wicket.markup.html ...)
+ TODO: check
+CVE-2026-82115 (Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws ...)
+ TODO: check
+CVE-2026-68591 (In Modem, there is a possible escalation of privilege due to a
permiss ...)
+ TODO: check
+CVE-2026-68590 (In ip_stack, there is a possible out of bounds read due to
improper in ...)
+ TODO: check
+CVE-2026-68589 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-68588 (In Modem, there is a possible way (for XXX) to XXXXX due to an
integer ...)
+ TODO: check
+CVE-2026-66570 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-62048 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-20600 (In Modem, there is a possible application crash due to a logic
error. ...)
+ TODO: check
+CVE-2026-20599 (In Modem, there is a possible escalation of privilege due to a
missing ...)
+ TODO: check
+CVE-2026-20598 (In Modem, there is a possible out of bounds read due to an
integer ove ...)
+ TODO: check
+CVE-2026-20597 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
+ TODO: check
+CVE-2026-20596 (In Modem, there is a possible out of bounds read due to
improper input ...)
+ TODO: check
+CVE-2026-20595 (In neuropilot, there is a possible out of bounds write due to
a missin ...)
+ TODO: check
+CVE-2026-20594 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
+ TODO: check
+CVE-2026-20593 (In Modem, there is a possible application crash due to
improper input ...)
+ TODO: check
+CVE-2026-20592 (In Modem, there is a possible information disclosure due to
side chann ...)
+ TODO: check
+CVE-2026-20591 (In GPU pdma, there is a possible escalation of privilege due
to a miss ...)
+ TODO: check
+CVE-2026-20590 (In display, there is a possible system crash due to a logic
error. Thi ...)
+ TODO: check
+CVE-2026-20585 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20584 (In usb, there is a possible memory corruption due to a missing
bounds ...)
+ TODO: check
+CVE-2026-20583 (In usb, there is a possible system crash due to use after
free. This c ...)
+ TODO: check
+CVE-2026-20582 (In usb, there is a possible memory corruption due to double
free. This ...)
+ TODO: check
+CVE-2026-20581 (In usb, there is a possible memory corruption due to use after
free. T ...)
+ TODO: check
+CVE-2026-20580 (In usb, there is a possible system crash due to use after
free. This c ...)
+ TODO: check
+CVE-2026-20578 (In Modem, there is a possible information disclosure due to
side chann ...)
+ TODO: check
+CVE-2026-20577 (In Modem, there is a possible permission bypass due to a
permissions b ...)
+ TODO: check
+CVE-2026-20576 (In afe, there is a possible out of bounds write due to a
missing bound ...)
+ TODO: check
+CVE-2026-20575 (In afe, there is a possible memory corruption due to use after
free. T ...)
+ TODO: check
+CVE-2026-20574 (In afe, there is a possible memory corruption due to use after
free. T ...)
+ TODO: check
+CVE-2026-20573 (In afe, there is a possible memory corruption due to double
free. This ...)
+ TODO: check
+CVE-2026-20572 (In adsp, there is a possible out of bounds write due to an
integer ove ...)
+ TODO: check
+CVE-2026-20571 (In afe, there is a possible memory corruption due to use after
free. T ...)
+ TODO: check
+CVE-2026-20570 (In adsp, there is a possible escalation of privilege due to
use after ...)
+ TODO: check
+CVE-2026-20569 (In adsp, there is a possible memory corruption due to use
after free. ...)
+ TODO: check
+CVE-2026-20568 (In afe, there is a possible system crash due to use after
free. This c ...)
+ TODO: check
+CVE-2026-20567 (In afe, there is a possible out of bounds write due to a
missing bound ...)
+ TODO: check
+CVE-2026-20566 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20565 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
+ TODO: check
+CVE-2026-20564 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
+ TODO: check
+CVE-2026-20563 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
+ TODO: check
+CVE-2026-20562 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20561 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20560 (In Modem, there is a possible system crash due to improper
input valid ...)
+ TODO: check
+CVE-2026-20559 (In GPU pdma, there is a possible memory corruption due to use
after fr ...)
+ TODO: check
+CVE-2026-20558 (In GPU pdma, there is a possible escalation of privilege due
to use af ...)
+ TODO: check
+CVE-2026-20557 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20556 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20555 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
+ TODO: check
+CVE-2026-20554 (In Modem, there is a possible system crash due to a missing
bounds che ...)
+ TODO: check
+CVE-2026-20553 (In DA, there is a possible out of bounds write due to a
missing bounds ...)
+ TODO: check
+CVE-2026-20552 (In ccci, there is a possible out of bounds write due to a
missing boun ...)
+ TODO: check
+CVE-2026-20551 (In gnss, there is a possible out of bounds write due to a
missing boun ...)
+ TODO: check
+CVE-2026-20550 (In gnss, there is a possible out of bounds write due to a
missing boun ...)
+ TODO: check
+CVE-2026-20549 (In Modem, there is a possible out of bounds write due to
improper inpu ...)
+ TODO: check
+CVE-2026-20548 (In Modem, there is a possible out of bounds write due to an
integer ov ...)
+ TODO: check
+CVE-2026-20547 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20546 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
+ TODO: check
+CVE-2026-20545 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-20499 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
+ TODO: check
+CVE-2026-120349 (A security flaw has been discovered in dayrui XunRuiCMS up to
4.7.4. A ...)
+ TODO: check
+CVE-2026-120348 (A vulnerability was identified in dayrui XunRuiCMS up to
4.7.4. Affect ...)
+ TODO: check
+CVE-2026-120347 (A vulnerability was determined in dayrui XunRuiCMS up to
4.7.4. Affect ...)
+ TODO: check
+CVE-2026-120345 (A vulnerability was found in WAVLINK WN551X3-A
M51X3_V251020-WO-182e96 ...)
+ TODO: check
+CVE-2026-120344 (A vulnerability has been found in WAVLINK WN551X3-A
M51X3_V251020-WO-1 ...)
+ TODO: check
+CVE-2026-120343 (A flaw has been found in mathurvishal
CloudClassroom-PHP-Project. The ...)
+ TODO: check
+CVE-2026-120342 (A vulnerability was detected in mathurvishal
CloudClassroom-PHP-Projec ...)
+ TODO: check
+CVE-2026-120341 (A security vulnerability has been detected in mathurvishal
CloudClassr ...)
+ TODO: check
+CVE-2026-120340 (A weakness has been identified in mathurvishal
CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-120339 (A security flaw has been discovered in mathurvishal
CloudClassroom-PHP ...)
+ TODO: check
+CVE-2026-120338 (Prefab UI's Generative UI sandbox runs caller-supplied Python
inside P ...)
+ TODO: check
+CVE-2026-120337 (A vulnerability was determined in VStarcam O-KAM SuperIPCam
1.3.3.32. ...)
+ TODO: check
+CVE-2026-120336 (A vulnerability was found in VStarcam O-KAM Client 1.3.3.32.
Affected ...)
+ TODO: check
+CVE-2026-120335 (A vulnerability has been found in deepset-ai farm up to
0.8.0. Affecte ...)
+ TODO: check
+CVE-2026-120334 (A flaw has been found in deepset-ai farm up to 0.8.0. This
impacts the ...)
+ TODO: check
+CVE-2026-120325 (A security vulnerability has been detected in Webpro-nl Knip
up to 6.4 ...)
+ TODO: check
+CVE-2026-120324 (A weakness has been identified in Aklivity Zilla up to
1.3.4/2.4.7/2.5 ...)
+ TODO: check
+CVE-2026-120323 (A security flaw has been discovered in samanhappy MCPHub up
to 1.0.45/ ...)
+ TODO: check
+CVE-2026-120322 (A vulnerability was identified in Termix-SSH Termix up to
2.9.2. This ...)
+ TODO: check
+CVE-2026-120320 (A vulnerability was determined in jxxghp MoviePilot up to
3.1.2. This ...)
+ TODO: check
+CVE-2026-120319 (A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x.
This affec ...)
+ TODO: check
+CVE-2026-120317 (http4k from 4.9.10.0 before 6.60.0.0 contains a missing
integrity chec ...)
+ TODO: check
+CVE-2026-120316 (http4k before 6.62.0.0-ee contains a path traversal
vulnerability in T ...)
+ TODO: check
+CVE-2026-120315 (LobeHub Chat from 1.84.26 before 2.1.49 contains a path
traversal vuln ...)
+ TODO: check
+CVE-2026-120314 (Network-AI from 5.14.0 before 5.15.5 contains a missing
authentication ...)
+ TODO: check
+CVE-2026-120313 (Network-AI before 5.15.5 contains a path traversal
vulnerability in In ...)
+ TODO: check
+CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5 contains a path
traversal vulnera ...)
+ TODO: check
+CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path
traversal vulnera ...)
+ TODO: check
+CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1
returns st ...)
+ TODO: check
+CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter
confusion vuln ...)
+ TODO: check
+CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function,
endpoint ...)
+ TODO: check
+CVE-2026-120307 (The Beta9 worker serves the sandbox file API from outside the
containe ...)
+ TODO: check
+CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition
into a Doc ...)
+ TODO: check
+CVE-2026-120283 (A vulnerability was identified in Linksys E8450
1.2.00.360516. Affecte ...)
+ TODO: check
+CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507.
This imp ...)
+ TODO: check
+CVE-2026-120281 (A vulnerability was found in WAVLINK WN536AX6-A V260507. This
affects ...)
+ TODO: check
+CVE-2026-120280 (A vulnerability has been found in WAVLINK WN536AX6-A V260507.
The impa ...)
+ TODO: check
+CVE-2026-120279 (A flaw has been found in WAVLINK WN536AX6-A V260507. The
affected elem ...)
+ TODO: check
+CVE-2026-120278 (A vulnerability was detected in WAVLINK WN536AX6-A
V260507_2.0.0. Impa ...)
+ TODO: check
+CVE-2026-120277 (A security vulnerability has been detected in WAVLINK
WN536AX6-A V2605 ...)
+ TODO: check
+CVE-2026-120276 (A weakness has been identified in WAVLINK WN536AX6-A
V260507_2.0.0. Th ...)
+ TODO: check
+CVE-2026-120275 (A security flaw has been discovered in Shanghai Xi Yu Ji Zhi
Technolog ...)
+ TODO: check
+CVE-2026-120274 (A vulnerability was identified in beecue FastBee up to 2.1.0.
Affected ...)
+ TODO: check
+CVE-2026-120263 (When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not
the defau ...)
+ TODO: check
+CVE-2026-120242 (A security flaw has been discovered in Ruijie RG-ES205GC,
RG-ES206GC-P ...)
+ TODO: check
+CVE-2026-120241 (A vulnerability was identified in Ruijie RG-ES205GC,
RG-ES206GC-P, RG- ...)
+ TODO: check
+CVE-2026-120240 (A vulnerability was determined in WAVLINK WN553X1-B
V260403_2.0.0. Thi ...)
+ TODO: check
+CVE-2026-120239 (A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0.
This vul ...)
+ TODO: check
+CVE-2026-120238 (A vulnerability has been found in WAVLINK WN553X1-B
260403_2.0.0. This ...)
+ TODO: check
+CVE-2026-120237 (A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58.
Affected b ...)
+ TODO: check
+CVE-2026-120236 (A vulnerability was detected in ag-ui-protocol ag-ui up to
0.0.58. Aff ...)
+ TODO: check
+CVE-2026-120235 (A security vulnerability has been detected in ag-ui-protocol
ag-ui up ...)
+ TODO: check
+CVE-2026-120234 (A weakness has been identified in ag-ui-protocol ag-ui up to
0.0.58. T ...)
+ TODO: check
+CVE-2026-120233 (A security flaw has been discovered in ag-ui-protocol ag-ui
up to 0.0. ...)
+ TODO: check
+CVE-2026-120232 (A vulnerability was identified in Horizon DataSys Reboot
Restore Stand ...)
+ TODO: check
+CVE-2026-120231 (A vulnerability was determined in WAVLINK WN553X1-B
V260403_2.0.0. The ...)
+ TODO: check
+CVE-2026-120230 (A vulnerability was found in WAVLINK WN701AE 260105. Impacted
is the f ...)
+ TODO: check
+CVE-2026-120229 (A vulnerability has been found in WAVLINK WN553X1-B
260403_2.0.0. This ...)
+ TODO: check
+CVE-2026-120228 (A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0.
This vulnera ...)
+ TODO: check
+CVE-2026-120227 (A vulnerability was detected in WAVLINK WN701AE
M01AE_V260105. This af ...)
+ TODO: check
+CVE-2026-120226 (A security vulnerability has been detected in Hangzhou
Xiongmai Techno ...)
+ TODO: check
+CVE-2026-120225 (A weakness has been identified in Oray Pugongying X5 Pro up
to 7.6.1. ...)
+ TODO: check
+CVE-2026-120224 (A security flaw has been discovered in Oray Pugongying X5 Pro
up to 7. ...)
+ TODO: check
+CVE-2026-120223 (A vulnerability was identified in Oray Pugongying X5 Pro up
to 7.6.1. ...)
+ TODO: check
+CVE-2026-119627 (The web profile and RSS/Atom feed routes of users and
organizations ch ...)
+ TODO: check
+CVE-2026-119625 (The `/{username}` web route accepted personal access tokens
over HTTP ...)
+ TODO: check
+CVE-2026-119533 (Repository and organization project boards listed the pull
requests th ...)
+ TODO: check
+CVE-2026-119480 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-119441 (`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of
an organ ...)
+ TODO: check
+CVE-2026-118504 (The web interface blocks issue and pull request changes on
archived re ...)
+ TODO: check
+CVE-2026-118395 (Gitea 1.27.3 stopped personal access tokens restricted to
public resou ...)
+ TODO: check
+CVE-2026-118394 (The OAuth2 userinfo endpoint (`/login/oauth/userinfo`)
decided whether ...)
+ TODO: check
+CVE-2026-118386 (Workflows triggered by a pull request review were read from
the commit ...)
+ TODO: check
+CVE-2026-117685 (The OCI registry's cross-repository blob mount checked the
target pack ...)
+ TODO: check
+CVE-2026-117680 (Improper Check for Unusual or Exceptional Conditions
vulnerability in ...)
+ TODO: check
+CVE-2026-117677 (When parsing an uploaded Helm chart, Gitea decompressed the
archive an ...)
+ TODO: check
+CVE-2026-117649 (The issue timeline API and the web issue page hid
cross-reference even ...)
+ TODO: check
+CVE-2026-117646 (The repositories, stars and watching tabs of user profiles
and the rep ...)
+ TODO: check
+CVE-2026-117635 (The `/api/v1/admin` route group did not enforce the
`public-only` rest ...)
+ TODO: check
+CVE-2026-116474 (The `GITEA_TOKEN` of a Gitea Actions job authenticates as the
`gitea-a ...)
+ TODO: check
+CVE-2026-116296 (The API routes for releases, release assets, milestones and
repository ...)
+ TODO: check
+CVE-2026-116289 (Gitea did not reject personal access tokens restricted to
public resou ...)
+ TODO: check
+CVE-2026-114199 (`GET /api/v1/users/{username}/heatmap` computed the
contribution heatm ...)
+ TODO: check
+CVE-2026-113429 (Legacy (v1 to v3) Actions artifact uploads stored the
request's `Conte ...)
+ TODO: check
+CVE-2026-112887 (Gitea Actions task tokens authenticate to the REST API as a
shared sys ...)
+ TODO: check
+CVE-2026-111089 (Apache Wicket reads texts from the application's resource
bundles \u20 ...)
+ TODO: check
+CVE-2026-101186 (DoS vulnerability in the window module. Impact: Successful
exploitatio ...)
+ TODO: check
+CVE-2026-101185 (OOB read vulnerability in the peripheral module. Impact:
Successful ex ...)
+ TODO: check
+CVE-2026-101183 (UAF vulnerability in the location service module. Impact:
Successful e ...)
+ TODO: check
+CVE-2026-101182 (Race condition vulnerability in the location service module.
Impact: S ...)
+ TODO: check
+CVE-2026-101181 (Permission control vulnerability in the WLAN module. Impact:
Successfu ...)
+ TODO: check
+CVE-2026-101180 (DoS vulnerability in the file parsing module. Impact:
Successful explo ...)
+ TODO: check
+CVE-2026-101179 (Buffer overflow vulnerability in the file preview module.
Impact: Succ ...)
+ TODO: check
+CVE-2026-101177 (Permission control vulnerability in the Optimizer module.
Impact: Succ ...)
+ TODO: check
+CVE-2026-101176 (Permission control vulnerability in the event notification
management ...)
+ TODO: check
+CVE-2026-101175 (Null pointer dereference vulnerability in the ArkWeb module.
Impact: S ...)
+ TODO: check
+CVE-2026-101174 (DoS vulnerability in the DSoftBus module. Impact: Successful
exploitat ...)
+ TODO: check
+CVE-2026-101173 (DoS vulnerability in the DSoftBus module. Impact: Successful
exploitat ...)
+ TODO: check
+CVE-2026-101172 (Permission control vulnerability in the graphics
module.Impact: Succes ...)
+ TODO: check
+CVE-2026-101171 (Permission control vulnerability in the background task
management mod ...)
+ TODO: check
+CVE-2026-101170 (DoS vulnerability in the file parsing module. Impact:
Successful explo ...)
+ TODO: check
+CVE-2025-11969 (The System REST APIs do not correctly enforce access control
mechanism ...)
+ TODO: check
+CVE-2024-5617 (The account lock feature fails to correctly enforce account
lockouts o ...)
+ TODO: check
CVE-2026-XXXX [GHSA-c5px-7h4c-gj8p: Remote code execution in C-Kermit]
- ckermit <unfixed>
NOTE:
https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p
@@ -7,9 +365,9 @@ CVE-2026-XXXX [GHSA-5pc4-gh6q-5h4w: Authentication bypass and
TLS certificate sp
CVE-2026-XXXX [GHSA-vhrv-7jrq-95qj: Arbitrary file write and safeguard bypass
during file transfers]
- ckermit <unfixed>
NOTE:
https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj
-CVE-2026-74760
+CVE-2026-74760 (Google::Auth versions from 0.11 through 0.12 for Perl accept
an author ...)
NOT-FOR-US: Google::Auth Perl module
-CVE-2026-74759
+CVE-2026-74759 (Google::Auth versions 0.12 for Perl allow server side request
forgery ...)
NOT-FOR-US: Google::Auth Perl module
CVE-2026-XXXX [GHSA-7pq7-3pmj-9wp6: Union-mode checkout follows an
attacker-planted symlink and writes outside the destination]
- ostree 2026.6-1
@@ -62,7 +420,7 @@ CVE-2026-XXXX [GHSA-pfcm-ffqg-84hx]
CVE-2026-XXXX [GHSA-gff5-3vgr-p8h2]
- libheif <unfixed>
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-gff5-3vgr-p8h2
-CVE-2026-13575
+CVE-2026-13575 (HTTP::Session versions before 0.54 for Perl allow memcached
command in ...)
NOT-FOR-US: HTTP::Session Perl module
CVE-2026-111426
- kdeconnect <unfixed> (bug #1152780)
@@ -837,7 +1195,7 @@ CVE-2026-39786 (Unauthenticated Cross Site Scripting (XSS)
in BA Book Everything
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39739 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-39738 (Unauthenticated PHP Object Injection in FunnelKit Automations
<= 3.8.6 ...)
+CVE-2026-39738 (Deserialization of Untrusted Data vulnerability in Aman
FunnelKit Auto ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39734 (Unauthenticated Path Traversal in WP EasyPay <= 4.5.4
versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -847,7 +1205,7 @@ CVE-2026-39375 (Frappe Learning Management System (LMS) is
a learning system tha
NOT-FOR-US: Frappe
CVE-2026-37468 (Cross Site Scripting vulnerability in BeeHome MyBeeHome before
2025-11 ...)
NOT-FOR-US: MyBeeHome
-CVE-2026-28160 (Unauthenticated Cross Site Scripting (XSS) in VikRentCar <=
1.4.10 ver ...)
+CVE-2026-28160 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27061 (Subscriber Cross Site Scripting (XSS) in User Registration <=
5.3.0 ve ...)
NOT-FOR-US: WordPress plugin or theme
@@ -5238,170 +5596,170 @@ CVE-2026-118370 (libexpat through 2.9.0 contains a
signed integer overflow vulne
- expat <unfixed> (bug #1152337)
NOTE: https://github.com/libexpat/libexpat/pull/1450
CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73
allowed ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118355 (Improper input validation in Command in Google Chrome prior
to 156.0.8 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118353 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to
156.0.8078.73 allow ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118344 (Use after free in Layout in Google Chrome prior to
156.0.8078.73 allow ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome
prior to 156 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to
156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118339 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118338 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to
156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior
to 156.0. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on
Mac prior ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118332 (Improper input validation in Compositing in Google Chrome
prior to 156 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior
to 156.0.8 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows
prior to 156. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac
prior to ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to
156.0.80 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118321 (Improper input validation in Core in Google Chrome on on
Android prior ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to
156.0.8078.73 allo ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to
156.0.8078.7 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118314 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118313 (Use after free in Video in Google Chrome prior to
156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118310 (Improper input validation in Views in Google Chrome on on
Windows prio ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118309 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73
allowed ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118307 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to
156.0.8078.7 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to
156.0.8078.73 ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
- {DSA-6592-1}
+ {DSA-6592-1 DLA-4878-1}
- chromium 156.0.8078.73-1
CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to
0.10.6. This ...)
NOT-FOR-US: a2ui-project a2ui
@@ -6005,31 +6363,31 @@ CVE-2026-13162 (An OS command vulnerability exists in
CoreTec productthat allows
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission
to uplo ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the
homeserver a ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118180
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID
made Thun ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118179
CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or
newLocation ele ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118178
CVE-2026-118177 (When looking for calendars in a directory on a server, during
account ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118177
CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from
accessing files o ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118176
CVE-2026-118175 (When replying to, forwarding, or editing a crafted email
message as ne ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118175
CVE-2026-118174 (When a message containing an OpenPGP key attachment was
displayed, Thu ...)
- {DSA-6598-1}
+ {DSA-6598-1 DLA-4877-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118174
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP
feed data, ...)
@@ -6113,7 +6471,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling
component. This vulnera
- firefox 159.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and
Animations co ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6121,7 +6479,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS
Transitions and Animat
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This
vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6129,7 +6487,7 @@ CVE-2026-118003 (Information disclosure in the
Networking: DNS component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the
Networking compone ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6137,7 +6495,7 @@ CVE-2026-118002 (Information disclosure due to race
condition in the Networking
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component.
This vulnera ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6145,7 +6503,7 @@ CVE-2026-118000 (Information disclosure in the
Networking: HTTP component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6153,7 +6511,7 @@ CVE-2026-117999 (Race condition in the IPC component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component.
This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6161,7 +6519,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push
Subscriptions component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component.
This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6169,7 +6527,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in
the Widget component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This
vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6177,7 +6535,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the
WebRTC component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling
component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6185,7 +6543,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI
Events & Focus Handling com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6193,7 +6551,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6201,7 +6559,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation
component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6209,7 +6567,7 @@ CVE-2026-117992 (Information disclosure in the CSS
Parsing and Computation compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6217,7 +6575,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6225,7 +6583,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6233,7 +6591,7 @@ CVE-2026-117989 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the
Graphics: C ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6241,7 +6599,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6249,7 +6607,7 @@ CVE-2026-117987 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6257,7 +6615,7 @@ CVE-2026-117986 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6265,7 +6623,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in
the Graphics component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and
Overflow co ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6273,7 +6631,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the
Layout: Scrolling and Over
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6281,7 +6639,7 @@ CVE-2026-117983 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6289,7 +6647,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This
vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6297,7 +6655,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit
component. This vulnerabili
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6305,7 +6663,7 @@ CVE-2026-117980 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender
component. Th ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6313,7 +6671,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the
Graphics: WebRender compon
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This
vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6321,7 +6679,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the
Graphics component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was
fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6329,7 +6687,7 @@ CVE-2026-117977 (Other issue in the Console component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This
vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6337,7 +6695,7 @@ CVE-2026-117976 (Site isolation issue in the DOM:
Navigation component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics:
WebRender compo ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6345,7 +6703,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in
the Graphics: WebRende
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6353,7 +6711,7 @@ CVE-2026-117974 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This
vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6361,7 +6719,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6369,7 +6727,7 @@ CVE-2026-117972 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview
component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6377,7 +6735,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in
the Print Preview compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6385,7 +6743,7 @@ CVE-2026-117970 (Race condition in the Disability Access
APIs component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6393,7 +6751,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6401,7 +6759,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6409,7 +6767,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6417,7 +6775,7 @@ CVE-2026-117966 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6425,7 +6783,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address
Bar component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This
vulnerabilit ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6433,7 +6791,7 @@ CVE-2026-117964 (Use-after-free in the Panning and
Zooming component. This vulne
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers
component. T ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6441,7 +6799,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the
DOM: Service Workers compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the
Storage: Qu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6449,7 +6807,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary
conditions in the Stor
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6457,7 +6815,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6465,7 +6823,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component.
This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6473,7 +6831,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service
Workers component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6481,7 +6839,7 @@ CVE-2026-117958 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This
vulnerab ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6489,7 +6847,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC:
Networking component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6497,7 +6855,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop
Client component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6505,7 +6863,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript:
WebAssembly component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6513,7 +6871,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6521,7 +6879,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6529,7 +6887,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6537,7 +6895,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML
component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6545,7 +6903,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the
DOM: Core & HTML component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6553,7 +6911,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6561,7 +6919,7 @@ CVE-2026-117948 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6569,7 +6927,7 @@ CVE-2026-117947 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6577,7 +6935,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6585,7 +6943,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6593,7 +6951,7 @@ CVE-2026-117944 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6601,7 +6959,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6609,7 +6967,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This
vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6617,7 +6975,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object
Model component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6625,7 +6983,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6633,7 +6991,7 @@ CVE-2026-117939 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6641,7 +6999,7 @@ CVE-2026-117938 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6649,7 +7007,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6657,7 +7015,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6665,7 +7023,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6673,7 +7031,7 @@ CVE-2026-117934 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component.
This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6681,7 +7039,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and
Computation component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6689,7 +7047,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This
vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6697,7 +7055,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6705,7 +7063,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6713,7 +7071,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6721,7 +7079,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6729,7 +7087,7 @@ CVE-2026-117927 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6737,7 +7095,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6745,7 +7103,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6753,7 +7111,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6761,7 +7119,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6769,7 +7127,7 @@ CVE-2026-117922 (Use-after-free in the Networking:
WebSockets component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6777,7 +7135,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6785,7 +7143,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6793,7 +7151,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6801,7 +7159,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This
vulnerabili ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6809,7 +7167,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics:
WebRender component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6817,7 +7175,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline
componen ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6825,7 +7183,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the
Layout: Block and Inline c
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6833,7 +7191,7 @@ CVE-2026-117914 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6841,7 +7199,7 @@ CVE-2026-117913 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6849,7 +7207,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6857,7 +7215,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6865,7 +7223,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6873,7 +7231,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6881,7 +7239,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This
vulnerability was fix ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6889,7 +7247,7 @@ CVE-2026-117907 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6897,7 +7255,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6905,7 +7263,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6913,7 +7271,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6921,7 +7279,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6929,7 +7287,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6937,7 +7295,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This
vulnerability was fi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6945,7 +7303,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6953,7 +7311,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6961,7 +7319,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6969,7 +7327,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6977,7 +7335,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6985,7 +7343,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling
component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6993,7 +7351,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the
WebRTC: Signaling componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component.
This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7001,7 +7359,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the
Security: PSM component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC:
Networking c ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7009,7 +7367,7 @@ CVE-2026-117892 (Privilege escalation due to
use-after-free in the WebRTC: Netwo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7017,7 +7375,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7025,7 +7383,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript
Engine: JIT component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7033,7 +7391,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component.
This vulnera ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7041,7 +7399,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics:
Canvas2D component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7049,7 +7407,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text
component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7057,7 +7415,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the
Graphics: Text component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This
vulnerability was f ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7065,7 +7423,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This
vulnerability was fix ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7073,7 +7431,7 @@ CVE-2026-117884 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7081,7 +7439,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7089,7 +7447,7 @@ CVE-2026-117882 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7097,7 +7455,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7105,7 +7463,7 @@ CVE-2026-117880 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7113,7 +7471,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB
component. This ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7121,7 +7479,7 @@ CVE-2026-117878 (Other issue, use-after-free in the
Storage: IndexedDB component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7129,7 +7487,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7137,7 +7495,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow
component. This v ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7145,7 +7503,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling
and Overflow component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This
vulnerabili ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7153,7 +7511,7 @@ CVE-2026-117874 (Use-after-free in the
Internationalization component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback
component. ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7161,7 +7519,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the
Audio/Video: Playback comp
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component.
This vul ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7169,7 +7527,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript:
Standard Library component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability
was fixe ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7177,7 +7535,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics
component. This vulnerability w
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7185,7 +7543,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine
component. This vulnera
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7193,7 +7551,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This
vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7201,7 +7559,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7209,7 +7567,7 @@ CVE-2026-117867 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics:
Canvas2D c ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7217,7 +7575,7 @@ CVE-2026-117866 (Privilege escalation due to
use-after-free in the Graphics: Can
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7225,7 +7583,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This
vulnerability was f ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7233,7 +7591,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the
Audio/Video ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7241,7 +7599,7 @@ CVE-2026-117863 (Information disclosure due to
uninitialized memory in the Audio
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in
the Netwo ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7249,7 +7607,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect
boundary conditions in th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -7257,7 +7615,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component.
This vulne ...)
- {DSA-6598-1 DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4877-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -37085,7 +37443,7 @@ CVE-2026-118475 (A flaw was found in Eye of GNOME. When
parsing a specially craf
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a
(50.4)
CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer
overflow e ...)
- {DLA-4874-1}
+ {DSA-6601-1 DLA-4874-1}
- eog 50.4-1 (bug #1150455)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
@@ -76442,7 +76800,7 @@ CVE-2026-81801 (Subscriber Settings Change in
WP-Stateless <= 4.4.1 versions.)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81800 (Unauthenticated SQL Injection in Verified Reviews (Avis
V\xe9rifi\xe9s ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-81799 (Unauthenticated Broken Access Control in Return Refund and
Exchange Fo ...)
+CVE-2026-81799 (Missing Authorization vulnerability in WP Swings Return Refund
and Exc ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81796 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
NOT-FOR-US: WordPress plugin or theme
@@ -104378,6 +104736,7 @@ CVE-2026-73187 (Unauthenticated SQL Injection in
Sticky Chat Widget <= 1.4.2 ver
CVE-2026-73181 (Unauthenticated Arbitrary File Download in Extra Product
Options & Add ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-73073 (Vim is an open source, command line text editor. Prior to
9.2.0845, St ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g
NOTE: Fixed by:
https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f
(v9.2.0845)
@@ -114735,14 +115094,17 @@ CVE-2026-73080 (SeaweedFS is a distributed storage
system. Prior to 4.24, Volume
CVE-2026-73079 (Sub2API is an AI API gateway platform designed to distribute
and manag ...)
NOT-FOR-US: Sub2API
CVE-2026-73078 (Vim is an open source, command line text editor. Prior to
9.2.0840, ru ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2
NOTE: Fixed by:
https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69
(v9.2.0840)
CVE-2026-73077 (Vim is an open source, command line text editor. Prior to
9.2.0839, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2
NOTE: Fixed by:
https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e
(v9.2.0839)
CVE-2026-73076 (Vim is an open source, command line text editor. Prior to
9.2.0847, ru ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2
NOTE: Fixed by:
https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452
(v9.2.0847)
@@ -114757,6 +115119,7 @@ CVE-2026-73074 (Vim is an open source, command line
text editor. Prior to 9.2.08
NOTE: https://github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j
NOTE: Fixed by:
https://github.com/vim/vim/commit/a9336b476fd1a182e3f79b5f83c0ffb04f8a922b
(v9.2.0841)
CVE-2026-73072 (Vim is an open source, command line text editor. Prior to
9.2.0846, se ...)
+ {DSA-6600-1}
- vim 2:9.2.0858-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64
NOTE: Fixed by:
https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a
(v9.2.0846)
@@ -147399,14 +147762,17 @@ CVE-2026-60120 (Bagisto before 2.4.4 contains a
stored cross-site scripting vuln
CVE-2026-5069 (The Fluent Forms plugin for WordPress is vulnerable to
incorrect autho ...)
NOT-FOR-US: WordPress plugin
CVE-2026-59858 (Vim is an open source, command line text editor. Prior to
9.2.0735, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x
NOTE: Fixed by:
https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e
(v9.2.0735)
CVE-2026-59857 (Vim is an open source, command line text editor. Prior to
9.2.0725, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2
NOTE: Fixed by:
https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30
(9.2.0725)
CVE-2026-59856 (Vim is an open source, command line text editor. Prior to
9.2.0736, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97
NOTE: Fixed by:
https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24
(v9.2.0736)
@@ -158255,10 +158621,12 @@ CVE-2026-57533 (Malicious HTML content could be
injected into the page pretix sh
CVE-2026-57532 (Malicious HTML content contained in the layout specification
of a PDF ...)
NOT-FOR-US: rami.io products
CVE-2026-57456 (Vim is an open source, command line text editor. Prior to
9.2.0699, Vi ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3
NOTE: Fixed by:
https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8
(v9.2.0699)
CVE-2026-57455 (Vim is an open source, command line text editor. Prior to
9.2.0698, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4
NOTE: Fixed by:
https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b
(v9.2.0698)
@@ -158279,6 +158647,7 @@ CVE-2026-57453 (Vim is an open source, command line
text editor. From 9.1.1784 u
NOTE: Fixed by:
https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a994c7e517c73f4a9
(v9.2.0678)
NOTE: Only an issue in compbination with executing PowerShell
CVE-2026-57452 (Vim is an open source, command line text editor. Prior to
9.2.0671, wh ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486
NOTE: Fixed by:
https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f
(v9.2.0671)
@@ -158444,10 +158813,12 @@ CVE-2026-55961 (wolfSSL_PKCS7_verify() returning
success for a degenerate (certs
[bullseye] - wolfssl <postponed> (Minor issue)
NOTE: https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)
CVE-2026-55895 (Vim is an open source, command line text editor. Prior to
9.2.0663, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh
NOTE: Fixed by:
https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2
(v9.2.0663)
CVE-2026-55892 (Vim is an open source, command line text editor. Prior to
9.2.0662, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h
NOTE: Fixed by:
https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241fc8633d93dff996b
(v9.2.0662)
@@ -158460,6 +158831,7 @@ CVE-2026-55698 (pnpm is a package manager. Prior to
10.34.2 and 11.5.3, pnpm can
CVE-2026-55697 (pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm
can insta ...)
- pnpm <itp> (bug #985669)
CVE-2026-55693 (Vim is an open source, command line text editor. Prior to
9.2.0653, th ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1140775)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq
NOTE: Fixed by:
https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7
(v9.2.0653)
@@ -168727,15 +169099,18 @@ CVE-2026-53460 (ImageMagick is free and open-source
software used for editing an
CVE-2026-53423 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
NOT-FOR-US: membraneframework membrane_mp4_plugin
CVE-2026-52860 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139730)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468
NOTE: Fixed by:
https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2
(v9.2.0597)
CVE-2026-52859 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139729; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm
NOTE: Fixed by:
https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19
(v9.2.0565)
NOTE: Crash in CLI tool, no security impact
CVE-2026-52858 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0782-1 (bug #1139728)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c
NOTE: Fixed by:
https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d
(v9.2.0561)
@@ -168840,12 +169215,14 @@ CVE-2026-47170 (Garlic-Hub manages digital signage
network \u2014 devices, conte
CVE-2026-47169 (Quest Bot is an opensource modern Discord Bot built for
moderation, ut ...)
NOT-FOR-US: Quest Bot
CVE-2026-47167 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9
NOTE: Fixed by:
https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934
(v9.2.0496)
CVE-2026-47163 (Quest Bot is an opensource modern Discord Bot built for
moderation, ut ...)
NOT-FOR-US: Quest Bot
CVE-2026-47162 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c
NOTE: Fixed by:
https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b
(v9.2.0495)
@@ -187893,6 +188270,7 @@ CVE-2026-4053 (Mattermost versions 11.5.x <= 11.5.1,
10.11.x <= 10.11.13 fail to
CVE-2026-46508 (Turborepo is a high-performance build system for JavaScript
and TypeSc ...)
NOT-FOR-US: Turborepo
CVE-2026-46483 (Vim is an open source, command line text editor. Prior to
9.2.0479, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1 (bug #1136803)
[bookworm] - vim <no-dsa> (Minor issue)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w
@@ -188819,6 +189197,7 @@ CVE-2026-8587 (Use after free in Extensions in Google
Chrome on Mac prior to 148
- chromium 148.0.7778.167-1
[bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-43961 (A flaw was found in Vim's netrw plugin. A crafted filename
containing ...)
+ {DSA-6600-1}
- vim 2:9.2.0524-1 (bug #1136828)
NOTE: https://www.openwall.com/lists/oss-security/2026/05/14/7
NOTE: https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3
@@ -192784,6 +193163,7 @@ CVE-2026-6664 (An integer overflow in network packet
parsing code in PgBouncer b
[bullseye] - pgbouncer <postponed> (Minor issue, DoS)
NOTE: Fixed by:
https://github.com/pgbouncer/pgbouncer/commit/ddc63c2175825bca9ef3c0a528280acaad76dbaa
(pgbouncer_1_25_2)
CVE-2026-45130 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0461-1 (bug #1136097)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv
NOTE: Fixed by:
https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8
(v9.2.0450)
@@ -192792,6 +193172,7 @@ CVE-2026-44987 (SysReptor is a fully customizable
pentest reporting platform. Pr
CVE-2026-44694 (n8n-MCP is an MCP server that provides AI assistants access to
n8n nod ...)
NOT-FOR-US: n8n-MCP
CVE-2026-44656 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0461-1 (bug #1136086)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg
NOTE: Fixed by:
https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0
(v9.2.0435)
@@ -192870,6 +193251,7 @@ CVE-2026-42308 (Pillow is a Python imaging library.
Prior to version 12.2.0, if
NOTE:
https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j
TODO: research fixing commit(s), maybe
https://github.com/python-pillow/Pillow/pull/9518/changes
CVE-2026-42307 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0428-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-85ch-p2qr-m5gx
NOTE: Fixed by:
https://github.com/vim/vim/commit/405e2fb6d54d5653523809e2853d99d1c000a5fc
(v9.2.0383)
@@ -201500,7 +201882,7 @@ CVE-2026-41604 (Out-of-bounds Read vulnerability in
Apache Thrift. This issue a
NOTE: swift bindings not built in Debian package
CVE-2026-7234 (A weakness has been identified in BrowserOperator
browser-operator-cor ...)
NOT-FOR-US: BrowserOperator browser-operator-core
-CVE-2026-7233 (A vulnerability was determined in Artifex MuPDF up to 1.28.0.
The impa ...)
+CVE-2026-7233 (A vulnerability was determined in Artifex MuPDF. The impacted
element ...)
- mupdf <unfixed> (bug #1135372)
[trixie] - mupdf <no-dsa> (Minor issue)
[bookworm] - mupdf <no-dsa> (Minor issue)
@@ -202546,6 +202928,7 @@ CVE-2026-41414 (Skim is a fuzzy finder designed to
through files, lines, and com
NOTE:
https://github.com/skim-rs/skim/security/advisories/GHSA-9g93-rxr5-xhqw
NOTE:
https://github.com/skim-rs/skim/commit/bf63404ad51985b00ed304690ba9d477860a5a75
CVE-2026-41411 (Vim is an open source, command line text editor. Prior to
9.2.0357, A ...)
+ {DSA-6600-1}
- vim 2:9.2.0428-1 (bug #1134906)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8
NOTE:
https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb
(v9.2.0357)
@@ -212543,6 +212926,7 @@ CVE-2026-31411 (In the Linux kernel, the following
vulnerability has been resolv
- linux 6.18.14-1
NOTE:
https://git.kernel.org/linus/ae88a5d2f29b69819dc7b04086734439d074a643 (7.0-rc1)
CVE-2026-39881 (Vim is an open source, command line text editor. Prior to
9.2.0316, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0338-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6
NOTE: Fixed by:
https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19c6cb52f89a365b4
(v9.2.0316)
@@ -213824,6 +214208,7 @@ CVE-2026-35470 (OpenSTAManager is an open source
management software for technic
CVE-2026-35209 (defu is software that allows uers to assign default properties
recursi ...)
NOT-FOR-US: defu
CVE-2026-35177 (Vim is an open source, command line text editor. Prior to
9.2.0280, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0315-1
NOTE: https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24
NOTE: Fixed by:
https://github.com/vim/vim/commit/7088926316d8d4a7572a242d0765e99adfc8b083
(v9.2.0280)
@@ -216622,6 +217007,7 @@ CVE-2026-23401 (In the Linux kernel, the following
vulnerability has been resolv
[bullseye] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/aad885e774966e97b675dfe928da164214a71605 (7.0-rc6)
CVE-2026-34982 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0315-1 (bug #1132450)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9
NOTE: Fixed by:
https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615f13a7de44c0587
(v9.2.0276)
@@ -224285,6 +224671,7 @@ CVE-2026-22731 (Spring Boot applications with
Actuator can be vulnerable to an "
CVE-2026-21992 (Vulnerability in the Oracle Identity Manager product of Oracle
Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-33412 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0218-1 (bug #1131450)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c
NOTE: https://github.com/vim/vim/pull/19746
@@ -227181,6 +227568,7 @@ CVE-2026-32259 (ImageMagick is free and open-source
software used for editing an
CVE-2026-32251 (Tolgee is an open-source localization platform. Prior to
3.166.3, the ...)
NOT-FOR-US: Tolgee
CVE-2026-32249 (Vim is an open source, command line text editor. From 9.1.0011
to befo ...)
+ {DSA-6600-1}
- vim 2:9.2.0218-1 (bug #1130658; unimportant)
[bookworm] - vim <not-affected> (Vulnerable code not present)
[bullseye] - vim <not-affected> (Vulnerable code not present)
@@ -233036,19 +233424,23 @@ CVE-2026-28424 (Statmatic is a Laravel and Git
powered content management system
CVE-2026-28423 (Statmatic is a Laravel and Git powered content management
system (CMS) ...)
NOT-FOR-US: Statmatic CMS
CVE-2026-28422 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129432; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf
NOTE: Fixed by:
https://github.com/vim/vim/commit/4e5b9e31cb7484ad156fba995fdce3c9b075b5fd
(v9.2.0078)
NOTE: Crash in CLI tool, no security impact
CVE-2026-28421 (Vim is an open source, command line text editor. Versions
prior to 9.2 ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129431)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p
NOTE: Fixed by:
https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3
(v9.2.0077)
CVE-2026-28420 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129430)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg
NOTE: Fixed by:
https://github.com/vim/vim/commit/bb6de2105b160e729c340631435cd62f3e69bd32
(v9.2.0076)
CVE-2026-28419 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129429; unimportant)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv
NOTE: Fixed by:
https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0
(v9.2.0075)
@@ -233112,10 +233504,12 @@ CVE-2026-1542 (The Super Stage WP WordPress plugin
through 1.0.1 unserializes us
CVE-2025-13673 (The Tutor LMS \u2013 eLearning and online course solution
plugin for W ...)
NOT-FOR-US: WordPress plugin
CVE-2026-28418 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129428)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-h4mf-vg97-hj8j
NOTE: Fixed by:
https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb46c3a9e76f684da2d
(v9.2.0074)
CVE-2026-28417 (Vim is an open source, command line text editor. Prior to
version 9.2. ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1129427)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336
NOTE: Fixed by:
https://github.com/vim/vim/commit/79348dbbc09332130f4c86045e1541d68514fcc1
(v9.2.0073)
@@ -239698,6 +240092,7 @@ CVE-2026-2443 (A flaw was identified in libsoup, a
widely used HTTP library in G
CVE-2026-2026 (A vulnerability has been identified where weak file permissions
in the ...)
NOT-FOR-US: Tenable
CVE-2026-26269 (Vim is an open source, command line text editor. Prior to
9.1.2148, a ...)
+ {DSA-6600-1}
- vim 2:9.2.0119-1 (bug #1127930)
[bookworm] - vim <no-dsa> (Minor issue)
[bullseye] - vim <postponed> (Minor issue, requires launching vim with
netbeans integration enabled)
@@ -242411,6 +242806,7 @@ CVE-2026-25757 (Spree is an open source e-commerce
solution built with Ruby on R
CVE-2026-25754 (AdonisJS is a TypeScript-first web framework. Prior to
versions 10.1.3 ...)
NOT-FOR-US: AdonisJS
CVE-2026-25749 (Vim is an open source, command line text editor. Prior to
version 9.1. ...)
+ {DSA-6600-1}
- vim 2:9.1.2141-1
[bookworm] - vim <no-dsa> (Minor issue)
[bullseye] - vim <postponed> (Minor issue)
@@ -317776,6 +318172,7 @@ CVE-2025-2800 (The WP Event Manager \u2013 Events
Calendar, Registrations, Sell
CVE-2025-2799 (The WP Event Manager \u2013 Events Calendar, Registrations,
Sell Ticke ...)
NOT-FOR-US: WordPress plugin
CVE-2025-53906 (Vim is an open source, command line text editor. Prior to
version 9.1. ...)
+ {DSA-6600-1}
[experimental] - vim 2:9.1.1766-1
- vim 2:9.1.1829-1 (bug #1109374)
[bookworm] - vim <no-dsa> (Minor issue)
@@ -317784,6 +318181,7 @@ CVE-2025-53906 (Vim is an open source, command line
text editor. Prior to versio
NOTE:
https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8
(v9.1.1551)
NOTE: https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86
CVE-2025-53905 (Vim is an open source, command line text editor. Prior to
version 9.1. ...)
+ {DSA-6600-1}
[experimental] - vim 2:9.1.1766-1
- vim 2:9.1.1829-1 (bug #1109374)
[bookworm] - vim <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a193801ae25939a10b7d834021c1dabedc6bd66b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a193801ae25939a10b7d834021c1dabedc6bd66b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
