Threats affecting pkg:generic/mosquitto

CVE-2026-123575 is a vulnerability in Hickory DNS versions before 0.26.2 involving memory exhaustion caused by incomplete DNS-over-HTTPS (DoH) request bodies. This flaw can lead to resource exhaustion on affected systems.

CVE-2026-92061 is a vulnerability in Microsoft Security's Process Sandboxing component caused by incorrect boundary conditions. The issue is identified as a CWE-119 type, which typically relates to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The affected version is Microsoft product version 4.0.

CVE-2026-123574 is a denial of service vulnerability in Hickory DNS versions 0.24.0 through before 0.26.2 caused by issues in the zone file parser. The flaw allows an attacker to cause service disruption by exploiting improper input validation. No CVSS score or detailed impact metrics are provided. No patch or remediation information is available in the provided data.

CVE-2026-100787 is a vulnerability involving a sandbox escape in the XUL component of Microsoft software version 4.0. The vulnerability is publicly disclosed but lacks detailed technical or impact information, and no CVSS score is available.

CVE-2026-8945 is a sandbox escape vulnerability affecting Firefox and Firefox Focus for Android. The vulnerability is identified as CWE-693, which relates to protection mechanism failures. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A use-after-free vulnerability has been identified in the Internationalization component of Microsoft software version 4.0. This type of flaw involves improper handling of memory, potentially leading to memory corruption.

CVE-2026-53260 is a vulnerability related to the TCP implementation involving the addition of preempt_disable_nested() and preempt_enable_nested() in the reqsk_queue_hash_req() function. The advisory references Microsoft products but provides no detailed impact or exploitation information.

CVE-2026-100786 is a use-after-free vulnerability in the Graphics component of Microsoft software version 4.0 that could allow sandbox escape. The vulnerability is publicly known but has no confirmed exploits in the wild. No CVSS score or detailed impact information is provided.

CVE-2026-92059 is a vulnerability in a Microsoft Editor component caused by incorrect boundary conditions in the DOM. The issue relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided.

Memory safety bugs were fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152, and Thunderbird 152. These bugs relate to improper handling of memory which can lead to security vulnerabilities. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the bugs or their impact.

A use-after-free vulnerability has been identified in the Graphics component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the DOM: Core & HTML component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

CVE-2026-92057 is a vulnerability in the Enterprise Policies component of Microsoft software version 4.0 that allows a mitigation bypass. The vulnerability is identified as CWE-693. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-12324 is a vulnerability in the Microsoft Graphics: CanvasWebGL component involving incorrect boundary conditions. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and there is no indication of known exploitation in the wild or available patches.

A use-after-free vulnerability exists in the Layout: Text and Fonts component of Microsoft software version 4.0. The issue is identified as CWE-416, which involves accessing memory after it has been freed. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the Graphics: Text component of Microsoft software version 4.0. This flaw involves improper handling of memory, which could potentially lead to security issues if exploited.

CVE-2026-12318 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue relates to a CWE-119 type flaw, which typically involves improper handling of memory boundaries. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor at this time.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-7324 is a memory safety vulnerability identified in Microsoft software version 4.0. The issue relates to memory safety bugs, specifically categorized under CWE-119. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild, and no patch or remediation details are available in the provided data.

A memory safety bug identified as CVE-2026-12317 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue categorized under CWE-119. No CVSS score or detailed impact information is provided. No known exploits in the wild have been reported. The affected version explicitly stated is version 4.0.