Threats affecting pkg:generic/mosquitto

CVE-2026-4716 is a vulnerability in the JavaScript Engine component of Microsoft software version 4.0 involving incorrect boundary conditions and uninitialized memory. The issue is identified as CWE-908. No CVSS score or detailed impact information is provided, and no patch or exploit is currently known.

CVE-2026-100762 is a use-after-free vulnerability in the DOM Content Processes component of Microsoft software version 4.0. This flaw could allow a sandbox escape, potentially enabling an attacker to break out of restricted execution environments.

An integer overflow vulnerability exists in the Graphics: ImageLib component of Microsoft software version 4.0. The issue is identified as CWE-190. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation or available patches.

CVE-2026-4715 is a vulnerability involving uninitialized memory in the Graphics: Canvas2D component of Microsoft software version 4.0. The flaw relates to improper memory handling that could potentially lead to security issues. No CVSS score or detailed impact information is provided. No known exploits or patches are currently documented.

A vulnerability identified as CVE-2026-92035 affects Microsoft software version 4.0. It involves a sandbox escape caused by incorrect boundary conditions in the Graphics component. This flaw could potentially allow an attacker to break out of a restricted execution environment.

CVE-2026-6772 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue is categorized under CWE-754, which relates to improper handling of boundary conditions. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available from the vendor.

A use-after-free vulnerability in the Graphics: WebGPU component of Microsoft software version 4.0 can lead to privilege escalation. This vulnerability is identified as CVE-2026-100761 and is categorized under CWE-416. No CVSS score or patch information is currently available.

CVE-2026-84140 is a site isolation issue affecting the DOM navigation component in Microsoft software version 4.0. The vulnerability is identified with CWE-346, which relates to insufficient authorization. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-4714 is a vulnerability in the Microsoft Audio/Video component caused by incorrect boundary conditions. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided. There are no known exploits in the wild and no patch information is available.

A denial of service vulnerability exists in FreeRDP versions before 3.32.2 related to RemoteFX region assertion handling. This flaw could allow an attacker to cause a denial of service condition. The vulnerability is identified as CWE-617. No CVSS score or detailed impact metrics are provided.

CVE-2026-92034 is a vulnerability in the Microsoft Graphics component related to site isolation issues. The vulnerability is identified with CWE-346, which involves improper authorization. The affected version is Microsoft version 4.0. There is no CVSS score or detailed impact description provided. No known exploits are reported in the wild, and no patch or remediation information is available.

CVE-2026-6771 is a vulnerability in a Microsoft security component related to a mitigation bypass in the DOM. The advisory references Microsoft's support lifecycle for software but does not provide detailed technical information or impact specifics.

A sandbox escape vulnerability exists in the Security: Process Sandboxing component of Microsoft software version 4.0. The vulnerability is identified as CVE-2026-100760 and is classified under CWE-693. No CVSS score or detailed impact information is provided, and there is no indication of known exploits in the wild. No patch or remediation details are currently available.

This vulnerability involves an unspecified issue in the Profile Backup component of Microsoft software version 4.0. No detailed technical information or impact description is provided beyond the classification under CWE-200 (Information Exposure).

A vulnerability identified as CVE-2026-92032 affects Microsoft software version 4.0. It involves a sandbox escape caused by an invalid pointer in the Graphics component. This flaw could potentially allow an attacker to break out of a restricted execution environment.

CVE-2026-4713 is a vulnerability in a Microsoft Graphics component involving incorrect boundary conditions. The advisory does not provide detailed technical information, impact specifics, or exploit status. No CVSS score or patch information is available.

CVE-2026-6769 is a privilege escalation vulnerability in the Debugger component of Microsoft software version 4.0. The vulnerability could allow an attacker to gain elevated privileges. No CVSS score or detailed technical information is provided. No known exploits in the wild have been reported, and no patch or remediation details are available.

CVE-2026-100759 is a vulnerability in Microsoft software version 4.0 involving uninitialized memory in the Storage: Quota Manager component. The vulnerability is categorized under CWE-457, which relates to the use of uninitialized variables. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available at this time.

The vulnerability in Apache Thrift's Java implementation involves the TProtocolUtil.skip() method, which does not impose a limit on recursion depth by default. This could potentially lead to issues related to uncontrolled recursion during protocol processing. The affected version explicitly identified is 4.0. No CVSS score or detailed impact information is provided.

A site isolation issue has been identified in the DOM Push Subscriptions component of Microsoft software version 4.0. The vulnerability is published but lacks detailed technical or impact information and no CVSS score is provided.