Threats affecting pkg:generic/mosquitto

CVE-2026-83596 is a vulnerability in Webkitgtk related to validating the full featurelist array in the opentypeverticaldata findfeature function. The vulnerability is identified as a CWE-120 type, which typically involves buffer overflows or improper memory handling. No CVSS score or detailed impact information is provided.

An uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Microsoft software version 4.0. The issue was publicly disclosed on November 14, 2026. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available in the provided data.

A privilege escalation vulnerability exists in the WebExtensions component of Microsoft software version 4.0. This vulnerability could allow an attacker to gain elevated privileges within the affected component. No CVSS score or detailed impact information is provided.

CVE-2026-4697 is a vulnerability in the Audio/Video: Web Codecs component of Microsoft software version 4.0 caused by incorrect boundary conditions. The issue is documented but lacks detailed public technical information and CVSS scoring. No known exploits in the wild have been reported, and no patch or remediation details are provided in the available data.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability has been identified in the WebRTC component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild or available patches at this time.

CVE-2026-10701 is a vulnerability in the Graphics: Text component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, with no CVSS score or public exploit information available.

CVE-2026-4696 is a use-after-free vulnerability in the Layout: Text and Fonts component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use of freed memory, potentially causing application crashes or other unintended behavior.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-6746 is a use-after-free vulnerability in the DOM: Core & HTML component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use-after-free conditions.

CVE-2026-106016 is a vulnerability in the File Handling component of Microsoft software version 4.0 that allows mitigation bypass. No specific technical details or impact descriptions are provided beyond the identification of the vulnerability and affected version.

CVE-2026-8093 addresses memory safety bugs fixed in Thunderbird version 4.0. The vulnerability is related to improper memory handling, categorized under CWE-119. No CVSS score or detailed impact information is provided.

CVE-2026-4695 is a vulnerability in the Audio/Video: Web Codecs component of Microsoft software version 4.0, involving incorrect boundary conditions. The vulnerability is documented but lacks detailed technical or impact information. No CVSS score or exploit details are available.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges if successfully exploited. No CVSS score or detailed impact metrics are provided. No known exploits in the wild have been reported, and no patch information is available.

CVE-2026-8090 is a use-after-free vulnerability in the DOM networking component of Microsoft software version 4.0. The vulnerability involves improper handling of memory leading to potential use of freed memory. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges if successfully exploited. No CVSS score or detailed impact information is provided.

CVE-2026-4694 is a vulnerability in the Microsoft Graphics component involving incorrect boundary conditions and an integer overflow. The issue affects version 4.0 of the product. No CVSS score or detailed impact information is provided. No known exploits or patches are currently documented.

CVE-2026-100832 is a use-after-free vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical or impact information and no CVSS score is assigned.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-4693 is a vulnerability in the Microsoft Audio/Video Playback component caused by incorrect boundary conditions. The flaw is identified as CWE-754, which relates to improper handling of boundary conditions. No CVSS score or detailed impact information is provided. The affected version is Microsoft version 4.0. No patch or remediation details are available in the provided data.