VIR Vulnerability Intelligence Relay

Search

Found 10,197 results in 1283ms · Match type: Filtered list

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2026-22695 high — 8.0 FIX rocky rheldebian debian 3mo ago RHSA-2026:4728: libpng security update (Important)
CVE-2026-2793 high — 8.0 FIX rocky rheldebian debian 3mo ago Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2026-2792 high — 8.0 FIX rocky rheldebian debian 3mo ago Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort…
CVE-2026-2791 high — 8.0 FIX rocky rheldebian debian 3mo ago Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2790 high — 8.0 FIX rocky rheldebian debian 3mo ago Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2789 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2788 high — 8.0 FIX rocky rheldebian debian 3mo ago Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2787 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2785 high — 8.0 FIX rocky rheldebian debian 3mo ago Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2784 high — 8.0 FIX rocky rheldebian debian 3mo ago Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2783 high — 8.0 FIX rocky rheldebian debian 3mo ago Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2782 high — 8.0 FIX rocky rheldebian debian 3mo ago Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2781 high — 8.0 FIX rocky rheldebian debian 3mo ago Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
CVE-2026-2780 high — 8.0 FIX rocky rheldebian debian 3mo ago Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2779 high — 8.0 FIX rocky rheldebian debian 3mo ago Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2778 high — 8.0 FIX rocky rheldebian debian 3mo ago Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunder…
CVE-2026-2777 high — 8.0 FIX rocky rheldebian debian 3mo ago Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2776 high — 8.0 FIX rocky rheldebian debian 3mo ago Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 14…
CVE-2026-2775 high — 8.0 FIX rocky rheldebian debian 3mo ago Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2774 high — 8.0 FIX rocky rheldebian debian 3mo ago Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2773 high — 8.0 FIX rocky rheldebian debian 3mo ago Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2772 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2771 high — 8.0 FIX rocky rheldebian debian 3mo ago Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2770 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2769 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2768 high — 8.0 FIX rocky rheldebian debian 3mo ago Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2767 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2766 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2765 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2764 high — 8.0 FIX rocky rheldebian debian 3mo ago JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2763 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2762 high — 8.0 FIX rocky rheldebian debian 3mo ago Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2761 high — 8.0 FIX rocky rheldebian debian 3mo ago Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2760 high — 8.0 FIX rocky rheldebian debian 3mo ago Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thun…
CVE-2026-2759 high — 8.0 FIX rocky rheldebian debian 3mo ago Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2758 high — 8.0 FIX rocky rheldebian debian 3mo ago Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2757 high — 8.0 FIX rocky rheldebian debian 3mo ago Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2447 high — 8.0 FIX rocky rheldebian debian 3mo ago Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
CVE-2025-14905 medium — 5.5 FIX debian debian rocky rhel 3mo ago RHSA-2026:5513: 389-ds:1.4 security update (Moderate)
CVE-2026-25646 high — 8.0 FIX rocky rheldebian debian 3mo ago RHSA-2026:9686: java-17-openjdk security update (Important)
CVE-2026-25506 high — 8.0 FIX rocky rhel sles 3mo ago RHSA-2026:3032: munge security update (Important)
CVE-2026-23074 high — 8.0 FIX slesdebian debianalmalinux almalinux 3mo ago In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root …
CVE-2026-22859 high — 8.0 FIX rocky rheldebian debian 3mo ago RHSA-2026:3334: freerdp security update (Important)
CVE-2026-22858 high — 8.0 FIX rocky rheldebian debian 3mo ago RHSA-2026:3334: freerdp security update (Important)
CVE-2026-22855 high — 8.0 FIX rocky rheldebian debian 3mo ago RHSA-2026:3334: freerdp security update (Important)
CVE-2025-38248 high — 8.0 FIX slesdebian debianalmalinux almalinux 3mo ago In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a mul…
CVE-2025-38206 medium — 5.5 FIX rhel slesdebian debian 3mo ago Moderate: kernel security update
CVE-2025-38129 medium — 5.5 FIX rhel slesdebian debian 3mo ago Moderate: kernel security update
CVE-2026-21721 high — 8.0 rhel sles rocky 4mo ago Important: grafana security update
CVE-2026-21637 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2026-0915 medium — 5.5 FIX rocky rheldebian debian google 4mo ago RHSA-2026:4772: glibc security update (Moderate)
CVE-2026-0861 medium — 5.5 FIX rheldebian debian sles google 4mo ago Moderate: glibc security update
CVE-2025-59466 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2025-59465 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2025-55132 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2025-55131 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2025-55130 high — 8.0 FIX rocky rhel sles 4mo ago Important: nodejs:24 security update
CVE-2025-15281 medium — 5.5 FIX rocky rheldebian debian google 4mo ago RHSA-2026:4772: glibc security update (Moderate)
CVE-2026-22998 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-68811 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-68349 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-61732 high — 8.0 FIX rocky rheldebian debian google 4mo ago A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
CVE-2025-61728 high — 8.0 FIX rocky rheldebian debian google 4mo ago archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously construct…
CVE-2025-40322 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40304 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40064 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-15059 high — 8.0 FIX rheldebian debian sles 4mo ago Important: gimp security update
CVE-2023-53034 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2026-1761 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2215: libsoup security update (Important)
CVE-2026-0719 high — 8.0 rocky rheldebian debian 4mo ago RHSA-2026:2215: libsoup security update (Important)
CVE-2025-40318 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-40271 medium — 6.5 EXPFIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40269 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40170 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40158 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-40141 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-40135 medium — 5.5 FIX rocky rhel sles google 4mo ago Moderate: kernel security update
CVE-2025-39760 high 7.1 7.1 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-38730 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-38459 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-38415 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-38403 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-38024 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-38022 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update
CVE-2025-37819 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-37789 medium — 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2026-23884 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23883 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23534 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23533 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23532 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23531 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2026-23530 high — 8.0 FIX rocky rheldebian debian 4mo ago RHSA-2026:2081: freerdp security update (Important)
CVE-2025-15279 high — 8.0 rheldebian debian sles 4mo ago RHSA-2026:7677: fontforge security update (Important)
CVE-2025-15275 high — 8.0 rheldebian debian sles 4mo ago RHSA-2026:7677: fontforge security update (Important)
CVE-2025-15269 high — 8.0 rheldebian debian sles 4mo ago RHSA-2026:7677: fontforge security update (Important)
CVE-2026-24049 high — 8.0 FIX rocky rhel sles 4mo ago RHSA-2026:2090: python3.12-wheel security update (Important)
CVE-2025-14104 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: util-linux security update
CVE-2025-40251 medium 5.5 5.5 FIX rhel sles rocky 4mo ago Moderate: kernel security update
CVE-2025-40154 medium — 5.5 FIX rocky rhel sles 4mo ago Moderate: kernel security update