Threats affecting pkg:generic/zxc

A use-after-free vulnerability has been identified in the Graphics: WebGPU component of Microsoft software version 4.0. This type of vulnerability can potentially lead to memory corruption issues. No CVSS score or detailed impact information is provided.

Memory safety bugs were fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, and Thunderbird 149. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the vulnerabilities or their impact.

A use-after-free vulnerability exists in the Networking: Cache component of Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

CVE-2026-92041 is a vulnerability in Microsoft software version 4.0 involving a mitigation bypass in the DOM networking component. The advisory does not provide detailed technical information or impact specifics. No CVSS score or exploit details are available.

CVE-2026-6782 is an information disclosure vulnerability affecting version 4.0 of a Microsoft product's IP Protection component. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

A use-after-free vulnerability exists in the Graphics: WebGPU component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

Multiple internally found bugs have been fixed in Thunderbird 155, Thunderbird ESR 153.2, and Thunderbird ESR 140.15. The advisory references Microsoft Support Lifecycle for software support details but does not provide specific vulnerability details or impact. No CVSS score or exploit information is available.

CVE-2026-4719 is a vulnerability in the Microsoft Graphics: Text component caused by incorrect boundary conditions. The issue affects version 4.0 of the product. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available from the provided data.

A use-after-free vulnerability exists in the JavaScript WebAssembly component of Microsoft software version 4.0. This flaw involves improper memory management that could potentially lead to memory corruption. No CVSS score or detailed impact information is provided, and no public exploit or patch information is available at this time.

A denial-of-service vulnerability exists in the Audio/Video: Playback component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score.

A use-after-free vulnerability exists in the JavaScript WebAssembly component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues.

CVE-2026-12292 is a vulnerability in the Web Audio component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided.

This entry references internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2. The description does not provide specific details about the vulnerabilities or their impact. The advisory points to the Microsoft Support Lifecycle for software support information but does not elaborate on the nature of the bugs or their exploitation.

CVE-2026-4718 is a vulnerability in the WebRTC signaling component of Microsoft software version 4.0, involving undefined behavior. No detailed technical information or impact specifics are provided. No CVSS score or exploit in the wild is reported.

A use-after-free vulnerability exists in the Networking: HTTP component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

CVE-2026-92038 is a vulnerability in the Remote Settings Client component of Microsoft software version 4.0. The vulnerability involves a mitigation bypass, which could potentially allow an attacker to circumvent existing security protections. No CVSS score or detailed impact information is provided.

A denial-of-service vulnerability exists in the Audio/Video Playback component of Microsoft software version 4.0. This flaw could allow an attacker to disrupt service availability by exploiting the component. No CVSS score or detailed technical information is provided, and no public exploits are known. No patch or remediation details are available at this time.

A privilege escalation vulnerability exists in the Graphics: WebGPU component of Microsoft software due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges. The vulnerability is identified as CVE-2026-100764 and affects version 4.0 of the product. No CVSS score or detailed impact information is provided. No patch or remediation guidance is currently available from the vendor.

This entry reports internally found bugs fixed in Thunderbird versions 155, Thunderbird ESR 153.2, and Thunderbird ESR 140.15. The vulnerability is identified as CVE-2026-84143 and is associated with Microsoft products. The description references the Microsoft Support Lifecycle for software support details but does not provide specific technical details or impact information about the vulnerability itself.

CVE-2026-4717 is a privilege escalation vulnerability in the Netmonitor component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.