Threats affecting pkg:generic/zxc

A site isolation issue has been identified in the CSS Parsing and Computation component of Microsoft software version 4.0. The vulnerability is catalogued as CVE-2026-74986 and is associated with CWE-200, indicating an information exposure weakness. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are currently available.

CVE-2026-74985 is a privilege escalation vulnerability in the Enterprise Policies component of Microsoft software version 4.0. The vulnerability allows an attacker to gain elevated privileges, potentially impacting system security. No CVSS score or detailed technical information is provided. There is no indication of active exploitation in the wild or available patches at this time.

A vulnerability identified as CVE-2026-74983 affects the Data Loss Prevention component in Microsoft software version 4.0. The issue involves a mitigation bypass, classified under CWE-693. No CVSS score or detailed technical impact information is provided. There is no indication of known exploitation in the wild or available patches at this time.

A denial-of-service vulnerability has been identified in the Widget component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No exploits are reported in the wild, and no patch or remediation details are provided.

A site isolation issue has been identified in the Audio/Video: Web Codecs component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-74981. No detailed technical information, impact, or exploit status is provided beyond its publication date.

CVE-2026-74979 is a vulnerability involving a mitigation bypass in the Add-ons Manager component of Microsoft software version 4.0. No detailed technical information or impact specifics are provided beyond this classification.

CVE-2026-8962 is a vulnerability in a Microsoft security component related to a mitigation bypass in the DOM. The vulnerability affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.

CVE-2026-8960 is a spoofing vulnerability affecting Microsoft WebExtensions version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No exploits in the wild or patch information are currently available.

CVE-2026-92079 is a vulnerability in the Widget: Win32 component of Microsoft software version 4.0 that allows mitigation bypass. The vulnerability is identified with CWE-693. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-8959 is a vulnerability in a Microsoft Win32 component called Widget, caused by incorrect boundary conditions that could allow a sandbox escape. This means that an attacker might bypass sandbox restrictions and execute code outside the intended isolated environment. The affected version is exactly 4.0. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the CPPI descriptor handling in the RX path of the ti: icssg-prueth network component. This flaw could lead to memory corruption issues. The affected version is 4.0. No CVSS score or detailed impact information is provided.

CVE-2026-92076 is a vulnerability in the Microsoft Networking component caused by incorrect boundary conditions. The flaw relates to improper handling of memory boundaries, classified under CWE-119. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. The affected version is Microsoft product version 4.0.

CVE-2026-8958 is a vulnerability in the Microsoft Security: Process Sandboxing component that can lead to information disclosure and sandbox escape. The affected version is 4.0. No CVSS score or detailed technical information is provided. No known exploits in the wild have been reported. No patch or remediation details are available in the provided data.

A privilege escalation vulnerability exists in the Enterprise Policies component of Microsoft software version 4.0. This flaw could allow an attacker to gain elevated privileges within the affected system. No CVSS score or detailed impact information is provided. No patch or remediation details are currently available.

CVE-2026-92075 is a vulnerability in the Networking component of Microsoft software version 4.0 that allows a mitigation bypass. No detailed technical information or impact specifics are provided beyond this classification.

An integer overflow vulnerability exists in the Networking: JAR component of Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

A mitigation bypass vulnerability exists in the Popup Blocker component of Microsoft software version 4.0. No detailed technical information or impact specifics are provided in the available data.

A privilege escalation vulnerability has been identified in the Enterprise Policies component of Microsoft software version 4.0. The vulnerability could allow an attacker to gain elevated privileges within the affected software. No CVSS score or detailed technical information is provided, and there is no indication of active exploitation in the wild.

CVE-2026-8955 is a published vulnerability in Microsoft software version 4.0 involving privilege escalation within the DOM Workers component. The available information does not provide technical details, impact specifics, or remediation guidance.

This entry references memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2. However, the provided data primarily relates to Microsoft and does not describe the specific vulnerability details, impact, or remediation status for these bugs. The description includes a generic link to the Microsoft Support Lifecycle, which is unrelated to the stated Firefox and Thunderbird fixes. No CVSS score or detailed technical information is provided.