Threats affecting pkg:generic/zxc

CVE-2026-123580 is a vulnerability in Hickory-DNS versions before 0.26.2 that allows DNSSEC nonexistence proof forgery via NSEC3. This flaw affects version 4.0 of the Microsoft product referenced. No CVSS score or detailed impact information is provided. No patch or remediation details are available in the provided data.

CVE-2026-100789 is a use-after-free vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical or impact information and no CVSS score is provided.

CVE-2026-8947 is a use-after-free vulnerability in the DOM Bindings (WebIDL) component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to unpredictable behavior or potential exploitation. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Session Restore component of Microsoft software version 4.0. This vulnerability could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation information is currently available.

CVE-2026-100788 is a vulnerability involving an invalid pointer in the JavaScript WebAssembly component of Microsoft software version 4.0. The description and details are minimal, with no CVSS score or public exploit information available. No patch or remediation details have been provided.

CVE-2026-8946 is a vulnerability in the Audio/Video: Web Codecs component of Microsoft software version 4.0. It involves incorrect boundary conditions, which is a type of memory safety issue classified under CWE-119. No CVSS score or detailed impact information is provided.

CVE-2026-123575 is a vulnerability in Hickory DNS versions before 0.26.2 involving memory exhaustion caused by incomplete DNS-over-HTTPS (DoH) request bodies. This flaw can lead to resource exhaustion on affected systems.

CVE-2026-92061 is a vulnerability in Microsoft Security's Process Sandboxing component caused by incorrect boundary conditions. The issue is identified as a CWE-119 type, which typically relates to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The affected version is Microsoft product version 4.0.

CVE-2026-123574 is a denial of service vulnerability in Hickory DNS versions 0.24.0 through before 0.26.2 caused by issues in the zone file parser. The flaw allows an attacker to cause service disruption by exploiting improper input validation. No CVSS score or detailed impact metrics are provided. No patch or remediation information is available in the provided data.

CVE-2026-100787 is a vulnerability involving a sandbox escape in the XUL component of Microsoft software version 4.0. The vulnerability is publicly disclosed but lacks detailed technical or impact information, and no CVSS score is available.

CVE-2026-8945 is a sandbox escape vulnerability affecting Firefox and Firefox Focus for Android. The vulnerability is identified as CWE-693, which relates to protection mechanism failures. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A use-after-free vulnerability has been identified in the Internationalization component of Microsoft software version 4.0. This type of flaw involves improper handling of memory, potentially leading to memory corruption.

CVE-2026-53260 is a vulnerability related to the TCP implementation involving the addition of preempt_disable_nested() and preempt_enable_nested() in the reqsk_queue_hash_req() function. The advisory references Microsoft products but provides no detailed impact or exploitation information.

CVE-2026-100786 is a use-after-free vulnerability in the Graphics component of Microsoft software version 4.0 that could allow sandbox escape. The vulnerability is publicly known but has no confirmed exploits in the wild. No CVSS score or detailed impact information is provided.

CVE-2026-92059 is a vulnerability in a Microsoft Editor component caused by incorrect boundary conditions in the DOM. The issue relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided.

Memory safety bugs were fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152, and Thunderbird 152. These bugs relate to improper handling of memory which can lead to security vulnerabilities. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the bugs or their impact.

A use-after-free vulnerability has been identified in the Graphics component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the DOM: Core & HTML component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

CVE-2026-92057 is a vulnerability in the Enterprise Policies component of Microsoft software version 4.0 that allows a mitigation bypass. The vulnerability is identified as CWE-693. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-12324 is a vulnerability in the Microsoft Graphics: CanvasWebGL component involving incorrect boundary conditions. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and there is no indication of known exploitation in the wild or available patches.