Threats affecting pkg:generic/mosquitto

A use-after-free vulnerability has been identified in the SVG component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

CVE-2026-4712 is an information disclosure vulnerability affecting the Microsoft product version 4.0 related to the Widget: Cocoa component. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

CVE-2026-6768 is a vulnerability in the Networking: Cookies component of Microsoft software version 4.0. The available information is limited and does not provide details on the nature of the mitigation bypass or its impact.

CVE-2026-100758 is a sandbox escape vulnerability in the DOM Navigation component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

An information disclosure vulnerability has been identified in the Networking: HTTP component of Microsoft software version 4.0. The vulnerability details are limited, and no CVSS score or exploit information is available. The vendor has not provided specific patch or remediation details.

A use-after-free vulnerability exists in the DOM Core and HTML component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-119341 affects Microsoft software version 4.0. It involves file-controlled pointers that still reach the delete operation in the ADAPT_CLASS_STRUCT destructor, related to CWE-763. No CVSS score or detailed impact information is provided.

CVE-2026-100757 is a use-after-free vulnerability in the Widget component of Microsoft software version 4.0. The advisory does not provide further technical details or impact specifics.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to an invalid pointer. This flaw could allow an attacker to gain elevated privileges if successfully exploited.

CVE-2026-6766 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, with no CVSS score or detailed impact information provided.

A use-after-free vulnerability has been identified in the Widget: Cocoa component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-4711. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability exists in the DOM Streams component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-84130 is an information disclosure vulnerability in the Graphics: WebGPU component of Microsoft software version 4.0. The vulnerability could allow unauthorized access to sensitive information due to improper handling within the WebGPU component. No CVSS score or detailed impact metrics are provided.

A privilege escalation vulnerability has been identified in the Networking component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-6761. No CVSS score or detailed technical impact information is provided. There is no indication of known exploitation in the wild or available patches at this time.

CVE-2026-4710 is a vulnerability in a Microsoft Audio/Video component caused by incorrect boundary conditions. The advisory does not provide detailed technical information or impact specifics. The affected version is Microsoft version 4.0. No CVSS score or exploit information is available.

CVE-2026-100756 is a vulnerability in the Microsoft Audio/Video Playback component caused by incorrect boundary conditions. This flaw relates to improper handling of memory boundaries, which is categorized under CWE-119. The affected version is exactly version 4.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are currently available.

A use-after-free vulnerability has been identified in the Networking component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

CVE-2026-6760 is a vulnerability in the Networking: Cookies component of Microsoft software version 4.0. The vulnerability is described as a mitigation bypass related to cookies. No detailed technical information, CVSS score, or exploit status is provided.

CVE-2026-84129 is a vulnerability in Microsoft software related to a site isolation issue in the DOM navigation component. The description and technical details are limited, providing no explicit information about the impact or exploitation. The affected version is exactly 4.0. No patch or remediation information is provided.

CVE-2026-4709 is a vulnerability in the Microsoft Audio/Video: GMP component caused by incorrect boundary conditions. The vulnerability details are limited, and no CVSS score or exploit information is available.