Threats affecting pkg:generic/mosquitto

A use-after-free vulnerability exists in the DOM Navigation component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-6759 is a use-after-free vulnerability in the Widget: Cocoa component of Microsoft software version 4.0. The vulnerability involves improper handling of memory, which could lead to undefined behavior or potential security issues. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the WebDriver BiDi component of Microsoft software version 4.0. This vulnerability could allow an attacker to gain elevated privileges within the affected component.

CVE-2026-4708 is a vulnerability in the Microsoft Graphics component involving incorrect boundary conditions. The vulnerability affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

A use-after-free vulnerability has been identified in the SVG component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-92024 and involves improper memory handling that could lead to security issues. No CVSS score or detailed impact information is provided. No patch or remediation details are currently available.

CVE-2026-113650 is a vulnerability in ApostropheCMS sanitize-html version 4.0 involving unbounded recursion when re-sanitizing the fallback of a discarded iframe. This flaw relates to improper handling of HTML sanitization that can lead to excessive recursion.

CVE-2026-6758 is a use-after-free vulnerability in the JavaScript WebAssembly component of Microsoft software version 4.0. The vulnerability is identified as CWE-416. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.

A use-after-free vulnerability in the Graphics: WebGPU component of Microsoft software version 4.0 can lead to privilege escalation. This flaw allows an attacker to potentially execute code with elevated privileges by exploiting improper memory management in the affected component.

CVE-2026-4707 is a vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0, involving incorrect boundary conditions. No detailed impact or exploitation information is provided.

A use-after-free vulnerability has been identified in the XML component of Microsoft software version 4.0. This type of flaw involves improper handling of memory, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

CVE-2026-84121 is a use-after-free vulnerability in the DOM security component of Microsoft software version 4.0. This flaw could allow a sandbox escape, potentially enabling an attacker to execute code outside of the intended restricted environment.

CVE-2026-6756 is a vulnerability described as a mitigation bypass in Firefox for Android. The available information is limited and does not provide technical details about the nature of the bypass, its exploitation, or impact. The affected version is specifically version 4.0. There is no CVSS score or detailed impact description provided.

CVE-2026-4706 is a vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue is identified as CWE-754, which relates to improper handling of boundary conditions. No CVSS score or detailed impact information is provided.

CVE-2026-92022 is a use-after-free vulnerability in the HTML Parser component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use-after-free conditions. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor advisory.

A use-after-free vulnerability exists in the DOM Navigation component of Microsoft software version 4.0, which could allow a sandbox escape. This vulnerability is identified as CVE-2026-84119 and is categorized under CWE-416. No CVSS score or detailed impact information is provided, and no patch or remediation details are available at this time.

A use-after-free vulnerability has been identified in the JavaScript Engine component of Microsoft software version 4.0. This vulnerability is cataloged as CVE-2026-6754 and is associated with CWE-416. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

An undefined behavior vulnerability exists in the WebRTC signaling component of Microsoft software version 4.0. No detailed technical information or impact description is provided.

A use-after-free vulnerability exists in the JavaScript Engine's JIT component in Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-8401 is a sandbox escape vulnerability in the Profile Backup component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical or impact information and no CVSS score is assigned.

CVE-2026-6753 is a vulnerability in the Microsoft WebRTC component caused by incorrect boundary conditions. The issue is identified as a CWE-119 type flaw. No CVSS score or detailed impact information is provided. The affected version is Microsoft version 4.0. No known exploits or patches are currently documented.