Threats affecting pkg:generic/zxc

A use-after-free vulnerability exists in the Layout: Text and Fonts component of Microsoft software version 4.0. The issue is identified as CWE-416, which involves accessing memory after it has been freed. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the Graphics: Text component of Microsoft software version 4.0. This flaw involves improper handling of memory, which could potentially lead to security issues if exploited.

CVE-2026-12318 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue relates to a CWE-119 type flaw, which typically involves improper handling of memory boundaries. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor at this time.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-7324 is a memory safety vulnerability identified in Microsoft software version 4.0. The issue relates to memory safety bugs, specifically categorized under CWE-119. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild, and no patch or remediation details are available in the provided data.

A memory safety bug identified as CVE-2026-12317 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue categorized under CWE-119. No CVSS score or detailed impact information is provided. No known exploits in the wild have been reported. The affected version explicitly stated is version 4.0.

A privilege escalation vulnerability has been identified in the DevTools component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-92055 and relates to improper authorization (CWE-269). No CVSS score or detailed technical impact information is provided. There is no indication of active exploitation in the wild, and no patch or remediation information is currently available.

A vulnerability in Gvfs involving a race condition in the gvfs-admin socket ownership allows local users to potentially gain root privileges. The issue is identified as CWE-367 (Time-of-check Time-of-use race condition). The affected version is 4.0. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-100781 affects Microsoft software version 4.0, involving a sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This flaw relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

Memory safety bugs have been identified and fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. These bugs relate to improper handling of memory, which can lead to potential security vulnerabilities. The specific vulnerability is tracked as CVE-2026-7323 and is associated with CWE-119, indicating a classic memory safety issue such as buffer overflows or similar. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

A mitigation bypass vulnerability exists in a Microsoft security component related to the DOM. The vulnerability is identified as CVE-2026-12316 and affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild or available patches at this time.

CVE-2026-100780 is a use-after-free vulnerability affecting the DOM Core and HTML component in Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical or impact information. No CVSS score or known exploits in the wild have been reported.

CVE-2026-92054 is a privilege escalation vulnerability affecting version 4.0 of a Microsoft product. The vulnerability involves the Memory component. No further technical details, CVSS score, or exploitation information are provided.

Memory safety bugs were fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the vulnerabilities or their impact.

A use-after-free vulnerability exists in the XSLT component of Microsoft software version 4.0. This type of vulnerability can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-12315 affects Microsoft software version 4.0. It involves a mitigation bypass in the DOM security component. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A sandbox escape vulnerability exists in the WebRTC Networking component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to break out of the sandbox environment.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to uninitialized memory. This flaw could potentially allow an attacker to gain elevated privileges on the affected system. No CVSS score or detailed impact information is provided, and no public exploits or patches are currently known.

A use-after-free vulnerability exists in the DOM Core & HTML component of Microsoft software version 4.0, which could allow a sandbox escape. The vulnerability is identified as CVE-2026-100778. No CVSS score or detailed impact information is provided.

A memory safety bug identified as CVE-2026-12314 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue, but no detailed technical information or impact specifics are provided. The affected product is Microsoft-related software version 4.0. No CVSS score or exploit information is available.