Threats affecting pkg:generic/mosquitto

A privilege escalation vulnerability has been identified in the DevTools component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-92055 and relates to improper authorization (CWE-269). No CVSS score or detailed technical impact information is provided. There is no indication of active exploitation in the wild, and no patch or remediation information is currently available.

A vulnerability in Gvfs involving a race condition in the gvfs-admin socket ownership allows local users to potentially gain root privileges. The issue is identified as CWE-367 (Time-of-check Time-of-use race condition). The affected version is 4.0. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-100781 affects Microsoft software version 4.0, involving a sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This flaw relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

Memory safety bugs have been identified and fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. These bugs relate to improper handling of memory, which can lead to potential security vulnerabilities. The specific vulnerability is tracked as CVE-2026-7323 and is associated with CWE-119, indicating a classic memory safety issue such as buffer overflows or similar. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

A mitigation bypass vulnerability exists in a Microsoft security component related to the DOM. The vulnerability is identified as CVE-2026-12316 and affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild or available patches at this time.

CVE-2026-100780 is a use-after-free vulnerability affecting the DOM Core and HTML component in Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical or impact information. No CVSS score or known exploits in the wild have been reported.

CVE-2026-92054 is a privilege escalation vulnerability affecting version 4.0 of a Microsoft product. The vulnerability involves the Memory component. No further technical details, CVSS score, or exploitation information are provided.

Memory safety bugs were fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the vulnerabilities or their impact.

A use-after-free vulnerability exists in the XSLT component of Microsoft software version 4.0. This type of vulnerability can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-12315 affects Microsoft software version 4.0. It involves a mitigation bypass in the DOM security component. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A sandbox escape vulnerability exists in the WebRTC Networking component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to break out of the sandbox environment.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to uninitialized memory. This flaw could potentially allow an attacker to gain elevated privileges on the affected system. No CVSS score or detailed impact information is provided, and no public exploits or patches are currently known.

A use-after-free vulnerability exists in the DOM Core & HTML component of Microsoft software version 4.0, which could allow a sandbox escape. The vulnerability is identified as CVE-2026-100778. No CVSS score or detailed impact information is provided.

A memory safety bug identified as CVE-2026-12314 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue, but no detailed technical information or impact specifics are provided. The affected product is Microsoft-related software version 4.0. No CVSS score or exploit information is available.

CVE-2026-7320 is an information disclosure vulnerability in the Audio/Video component of Microsoft software version 4.0 caused by incorrect boundary conditions. The flaw could potentially allow unauthorized access to sensitive information. No CVSS score or detailed impact information is provided.

CVE-2026-92051 is a spoofing vulnerability in a Microsoft Graphics component caused by an invalid pointer. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and no known exploits or patches are currently documented.

A memory safety vulnerability identified as CVE-2026-12312 has been fixed in Thunderbird 152. The vulnerability is categorized under CWE-119, which involves issues related to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The affected version explicitly stated is version 4.0. No known exploits in the wild have been reported, and no patch links or vendor advisory details are available.

A use-after-free vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0. This vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported.

A memory safety vulnerability identified as CVE-2026-12310 has been fixed in Thunderbird 152. The vulnerability relates to a memory safety bug categorized under CWE-119. No CVSS score or detailed impact information is provided in the available data.

CVE-2026-4726 is a denial-of-service vulnerability in a Microsoft XML component affecting version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No patch or remediation details are provided.