Threats affecting pkg:generic/zxc

A sandbox escape vulnerability exists in the Security: Process Sandboxing component of Microsoft software version 4.0. The vulnerability is identified as CVE-2026-100760 and is classified under CWE-693. No CVSS score or detailed impact information is provided, and there is no indication of known exploits in the wild. No patch or remediation details are currently available.

This vulnerability involves an unspecified issue in the Profile Backup component of Microsoft software version 4.0. No detailed technical information or impact description is provided beyond the classification under CWE-200 (Information Exposure).

A vulnerability identified as CVE-2026-92032 affects Microsoft software version 4.0. It involves a sandbox escape caused by an invalid pointer in the Graphics component. This flaw could potentially allow an attacker to break out of a restricted execution environment.

CVE-2026-4713 is a vulnerability in a Microsoft Graphics component involving incorrect boundary conditions. The advisory does not provide detailed technical information, impact specifics, or exploit status. No CVSS score or patch information is available.

CVE-2026-6769 is a privilege escalation vulnerability in the Debugger component of Microsoft software version 4.0. The vulnerability could allow an attacker to gain elevated privileges. No CVSS score or detailed technical information is provided. No known exploits in the wild have been reported, and no patch or remediation details are available.

CVE-2026-100759 is a vulnerability in Microsoft software version 4.0 involving uninitialized memory in the Storage: Quota Manager component. The vulnerability is categorized under CWE-457, which relates to the use of uninitialized variables. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available at this time.

The vulnerability in Apache Thrift's Java implementation involves the TProtocolUtil.skip() method, which does not impose a limit on recursion depth by default. This could potentially lead to issues related to uncontrolled recursion during protocol processing. The affected version explicitly identified is 4.0. No CVSS score or detailed impact information is provided.

A site isolation issue has been identified in the DOM Push Subscriptions component of Microsoft software version 4.0. The vulnerability is published but lacks detailed technical or impact information and no CVSS score is provided.

A use-after-free vulnerability has been identified in the SVG component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

CVE-2026-4712 is an information disclosure vulnerability affecting the Microsoft product version 4.0 related to the Widget: Cocoa component. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

CVE-2026-6768 is a vulnerability in the Networking: Cookies component of Microsoft software version 4.0. The available information is limited and does not provide details on the nature of the mitigation bypass or its impact.

CVE-2026-100758 is a sandbox escape vulnerability in the DOM Navigation component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

An information disclosure vulnerability has been identified in the Networking: HTTP component of Microsoft software version 4.0. The vulnerability details are limited, and no CVSS score or exploit information is available. The vendor has not provided specific patch or remediation details.

A use-after-free vulnerability exists in the DOM Core and HTML component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-119341 affects Microsoft software version 4.0. It involves file-controlled pointers that still reach the delete operation in the ADAPT_CLASS_STRUCT destructor, related to CWE-763. No CVSS score or detailed impact information is provided.

CVE-2026-100757 is a use-after-free vulnerability in the Widget component of Microsoft software version 4.0. The advisory does not provide further technical details or impact specifics.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to an invalid pointer. This flaw could allow an attacker to gain elevated privileges if successfully exploited.

CVE-2026-6766 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, with no CVSS score or detailed impact information provided.

A use-after-free vulnerability has been identified in the Widget: Cocoa component of Microsoft software version 4.0. The vulnerability is documented under CVE-2026-4711. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability exists in the DOM Streams component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.