Threats affecting pkg:generic/mosquitto

CVE-2026-92044 is an information disclosure vulnerability in the Networking: HTTP component of Microsoft software version 4.0. The vulnerability could allow unauthorized disclosure of information. No CVSS score or detailed technical impact is provided. There is no indication of active exploitation in the wild or available patches.

This vulnerability is a use-after-free flaw in the DOM Content Processes component of Microsoft software, which can lead to sandbox escape. It affects version 4.0 of the product. No CVSS score or detailed impact information is provided, and there is no indication of known exploitation in the wild. No patch or remediation details are available from the vendor at this time.

Memory safety bugs have been fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150, and Thunderbird 150. The vulnerability is identified as CVE-2026-6786 and is associated with Microsoft. The advisory references the Microsoft Support Lifecycle for software support details. No CVSS score or detailed impact information is provided.

CVE-2026-4722 is a published vulnerability involving privilege escalation in the IPC component of Microsoft software version 4.0. No CVSS score or detailed technical information about the flaw or its impact is provided. There is no indication of known exploitation in the wild or available patches.

A privilege escalation vulnerability exists in the Audio/Video component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided.

This entry refers to memory safety bugs fixed in various Mozilla products including Firefox ESR and Thunderbird ESR, as well as Firefox 150. The provided data references a Microsoft product version 4.0 as affected by CVE-2026-6785, but no detailed description of the vulnerability or its impact is given. There is no CVSS score or detailed technical information available. No patch links or vendor advisory content are provided, and no known exploits in the wild are reported.

CVE-2026-12295 is a sandbox escape vulnerability in the DOM Navigation component of Microsoft software version 4.0. The vulnerability is published but lacks detailed technical or impact information and no CVSS score is provided.

A use-after-free vulnerability exists in the JavaScript WebAssembly component of Microsoft software version 4.0. This flaw is identified as CWE-416 and was published on November 14, 2026. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available from the vendor at this time.

This entry references memory safety bugs fixed in various Mozilla products including Firefox ESR and Thunderbird ESR, but the provided information is about a Microsoft vulnerability identified as CVE-2026-4721 with affected version 4.0. The description does not detail the nature of the vulnerability or its impact. No CVSS score or patch information is provided.

A race condition vulnerability exists in the DOM Content Processes component of Microsoft software version 4.0. The advisory provides no further technical details or impact information.

Memory safety bugs affecting Firefox 150 and Thunderbird 150 have been identified and fixed. The advisory references Microsoft Security Response Center but provides no detailed technical information or CVSS score. No known exploits are reported in the wild. The affected version explicitly stated is version 4.0 of an unspecified Microsoft product, which appears inconsistent with the Firefox and Thunderbird mention.

CVE-2026-12294 is a sandbox escape vulnerability in the DOM Workers component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and CVSS scoring. No known exploits in the wild have been reported, and no patch or remediation details are provided.

A use-after-free vulnerability has been identified in the Graphics: WebGPU component of Microsoft software version 4.0. This type of vulnerability can potentially lead to memory corruption issues. No CVSS score or detailed impact information is provided.

Memory safety bugs were fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, and Thunderbird 149. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the vulnerabilities or their impact.

A use-after-free vulnerability exists in the Networking: Cache component of Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

CVE-2026-92041 is a vulnerability in Microsoft software version 4.0 involving a mitigation bypass in the DOM networking component. The advisory does not provide detailed technical information or impact specifics. No CVSS score or exploit details are available.

CVE-2026-6782 is an information disclosure vulnerability affecting version 4.0 of a Microsoft product's IP Protection component. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

A use-after-free vulnerability exists in the Graphics: WebGPU component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

Multiple internally found bugs have been fixed in Thunderbird 155, Thunderbird ESR 153.2, and Thunderbird ESR 140.15. The advisory references Microsoft Support Lifecycle for software support details but does not provide specific vulnerability details or impact. No CVSS score or exploit information is available.

CVE-2026-4719 is a vulnerability in the Microsoft Graphics: Text component caused by incorrect boundary conditions. The issue affects version 4.0 of the product. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available from the provided data.