Threats affecting pkg:generic/kimageformats

A vulnerability identified as CVE-2026-119341 affects Microsoft software version 4.0. It involves file-controlled pointers that still reach the delete operation in the ADAPT_CLASS_STRUCT destructor, related to CWE-763. No CVSS score or detailed impact information is provided.

CVE-2026-100757 is a use-after-free vulnerability in the Widget component of Microsoft software version 4.0. The advisory does not provide further technical details or impact specifics.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to an invalid pointer. This flaw could allow an attacker to gain elevated privileges if successfully exploited.

CVE-2026-6766 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, with no CVSS score or detailed impact information provided.

A use-after-free vulnerability has been identified in the Widget: Cocoa component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-4711. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability exists in the DOM Streams component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-84130 is an information disclosure vulnerability in the Graphics: WebGPU component of Microsoft software version 4.0. The vulnerability could allow unauthorized access to sensitive information due to improper handling within the WebGPU component. No CVSS score or detailed impact metrics are provided.

A privilege escalation vulnerability has been identified in the Networking component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-6761. No CVSS score or detailed technical impact information is provided. There is no indication of known exploitation in the wild or available patches at this time.

CVE-2026-4710 is a vulnerability in a Microsoft Audio/Video component caused by incorrect boundary conditions. The advisory does not provide detailed technical information or impact specifics. The affected version is Microsoft version 4.0. No CVSS score or exploit information is available.

CVE-2026-100756 is a vulnerability in the Microsoft Audio/Video Playback component caused by incorrect boundary conditions. This flaw relates to improper handling of memory boundaries, which is categorized under CWE-119. The affected version is exactly version 4.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are currently available.

A use-after-free vulnerability has been identified in the Networking component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

CVE-2026-6760 is a vulnerability in the Networking: Cookies component of Microsoft software version 4.0. The vulnerability is described as a mitigation bypass related to cookies. No detailed technical information, CVSS score, or exploit status is provided.

CVE-2026-84129 is a vulnerability in Microsoft software related to a site isolation issue in the DOM navigation component. The description and technical details are limited, providing no explicit information about the impact or exploitation. The affected version is exactly 4.0. No patch or remediation information is provided.

CVE-2026-4709 is a vulnerability in the Microsoft Audio/Video: GMP component caused by incorrect boundary conditions. The vulnerability details are limited, and no CVSS score or exploit information is available.

A use-after-free vulnerability exists in the DOM Navigation component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-6759 is a use-after-free vulnerability in the Widget: Cocoa component of Microsoft software version 4.0. The vulnerability involves improper handling of memory, which could lead to undefined behavior or potential security issues. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the WebDriver BiDi component of Microsoft software version 4.0. This vulnerability could allow an attacker to gain elevated privileges within the affected component.

CVE-2026-4708 is a vulnerability in the Microsoft Graphics component involving incorrect boundary conditions. The vulnerability affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

A use-after-free vulnerability has been identified in the SVG component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-92024 and involves improper memory handling that could lead to security issues. No CVSS score or detailed impact information is provided. No patch or remediation details are currently available.

CVE-2026-113650 is a vulnerability in ApostropheCMS sanitize-html version 4.0 involving unbounded recursion when re-sanitizing the fallback of a discarded iframe. This flaw relates to improper handling of HTML sanitization that can lead to excessive recursion.