Threats affecting pkg:generic/zxc

CVE-2026-7320 is an information disclosure vulnerability in the Audio/Video component of Microsoft software version 4.0 caused by incorrect boundary conditions. The flaw could potentially allow unauthorized access to sensitive information. No CVSS score or detailed impact information is provided.

CVE-2026-92051 is a spoofing vulnerability in a Microsoft Graphics component caused by an invalid pointer. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and no known exploits or patches are currently documented.

A memory safety vulnerability identified as CVE-2026-12312 has been fixed in Thunderbird 152. The vulnerability is categorized under CWE-119, which involves issues related to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The affected version explicitly stated is version 4.0. No known exploits in the wild have been reported, and no patch links or vendor advisory details are available.

A use-after-free vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0. This vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported.

A memory safety vulnerability identified as CVE-2026-12310 has been fixed in Thunderbird 152. The vulnerability relates to a memory safety bug categorized under CWE-119. No CVSS score or detailed impact information is provided in the available data.

CVE-2026-4726 is a denial-of-service vulnerability in a Microsoft XML component affecting version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No patch or remediation details are provided.

CVE-2026-92050 is a vulnerability in the XPConnect component of Microsoft software version 4.0, involving a race condition that could allow sandbox escape. The vulnerability is identified as a concurrency issue (CWE-362). No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available from the vendor at this time.

A use-after-free vulnerability exists in the JavaScript WebAssembly component of Microsoft software version 4.0. This flaw could potentially lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A memory safety vulnerability identified as CVE-2026-12305 has been fixed in Thunderbird 152. The vulnerability is related to improper memory handling, categorized under CWE-119. No CVSS score or detailed impact information is provided. No known exploits are reported in the wild. The affected version explicitly stated is version 4.0.

A use-after-free vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0, which could allow a sandbox escape. This vulnerability has been publicly disclosed but lacks detailed technical or impact information and no CVSS score is provided.

A use-after-free vulnerability has been identified in the Widget: Win32 component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

CVE-2026-100775 is a sandbox escape vulnerability in the Graphics component of Microsoft software version 4.0. The vulnerability allows an attacker to break out of the restricted sandbox environment, potentially leading to unauthorized actions outside the sandbox. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

A sandbox escape vulnerability exists in the Widget: Win32 component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to break out of the sandbox environment. No CVSS score or detailed impact information is provided.

CVE-2026-100774 is a use-after-free vulnerability affecting the DOM Core and HTML components in Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use-after-free conditions.

CVE-2026-12299 is a vulnerability involving a JIT miscompilation issue in the DOM Core and HTML components of Microsoft software version 4.0. The vulnerability is identified as CWE-843, which relates to improper control flow or logic errors in code generation. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available in the provided data.

A privilege escalation vulnerability exists in the Crash Reporting component of Microsoft software version 4.0. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. There is no indication of public exploits or active exploitation in the wild. No patch or remediation details are currently available.

A use-after-free vulnerability exists in the Storage: IndexedDB component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to unpredictable behavior or potential exploitation.

A memory safety bug identified as CVE-2026-12298 was fixed in Thunderbird 152. The vulnerability is related to a memory safety issue classified under CWE-125. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild. The affected version explicitly stated is version 4.0 of the Microsoft product referenced, though the title mentions Thunderbird 152, suggesting some ambiguity in product naming.

A use-after-free vulnerability has been identified in the Graphics component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided. There are no known exploits in the wild, and no official patch or remediation details have been disclosed yet.

CVE-2026-4724 is a vulnerability in the Microsoft Audio/Video component characterized by undefined behavior. The advisory does not provide specific technical details or impact information. The affected version is Microsoft version 4.0. No CVSS score or exploit information is available.