Threats affecting pkg:generic/zxc

CVE-2026-4706 is a vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue is identified as CWE-754, which relates to improper handling of boundary conditions. No CVSS score or detailed impact information is provided.

CVE-2026-92022 is a use-after-free vulnerability in the HTML Parser component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use-after-free conditions. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor advisory.

A use-after-free vulnerability exists in the DOM Navigation component of Microsoft software version 4.0, which could allow a sandbox escape. This vulnerability is identified as CVE-2026-84119 and is categorized under CWE-416. No CVSS score or detailed impact information is provided, and no patch or remediation details are available at this time.

A use-after-free vulnerability has been identified in the JavaScript Engine component of Microsoft software version 4.0. This vulnerability is cataloged as CVE-2026-6754 and is associated with CWE-416. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

An undefined behavior vulnerability exists in the WebRTC signaling component of Microsoft software version 4.0. No detailed technical information or impact description is provided.

A use-after-free vulnerability exists in the JavaScript Engine's JIT component in Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

CVE-2026-8401 is a sandbox escape vulnerability in the Profile Backup component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical or impact information and no CVSS score is assigned.

CVE-2026-6753 is a vulnerability in the Microsoft WebRTC component caused by incorrect boundary conditions. The issue is identified as a CWE-119 type flaw. No CVSS score or detailed impact information is provided. The affected version is Microsoft version 4.0. No known exploits or patches are currently documented.

A denial-of-service vulnerability exists in the WebRTC signaling component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and CVSS scoring.

A privilege escalation vulnerability exists in the Graphics: WebRender component of Microsoft software due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. The affected version is 4.0. No CVSS score or detailed impact information is provided.

CVE-2026-8391 is a vulnerability in the JavaScript Engine component of Microsoft software version 4.0. The description and technical details are minimal, with no CVSS score or detailed impact information provided. There are no known exploits in the wild and no patch information available at this time.

CVE-2026-6752 is a vulnerability in the Microsoft WebRTC component involving incorrect boundary conditions. The issue is categorized under CWE-119, which relates to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The vulnerability affects version 4.0 of the product. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-4702 is a vulnerability involving a JIT miscompilation issue in the JavaScript Engine component of Microsoft software version 4.0. The vulnerability is publicly disclosed but lacks detailed technical or impact information and does not have an assigned CVSS score.

CVE-2026-92019 is a vulnerability in the Remote Settings Client component of Microsoft software version 4.0. The vulnerability involves a mitigation bypass, but no further technical details or impact specifics are provided. There is no CVSS score or public exploit information available at this time.

CVE-2026-8390 is a use-after-free vulnerability in the JavaScript WebAssembly component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits in the wild or patch information are currently available.

A use-after-free vulnerability exists in the JavaScript Engine component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided. No known exploits in the wild have been reported. No patch or remediation details are available.

CVE-2026-6751 is a vulnerability involving uninitialized memory in the Audio/Video: Web Codecs component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical or impact information and does not have an assigned CVSS score.

CVE-2026-92018 is a sandbox escape vulnerability affecting the DOM Core and HTML component in Microsoft software version 4.0. The vulnerability allows an attacker to potentially break out of the sandbox environment, which is designed to isolate code execution and prevent unauthorized access. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available at this time.

CVE-2026-4700 is a vulnerability in the Networking: HTTP component of Microsoft software version 4.0. The available information is limited and does not provide specific technical details or impact descriptions beyond the identification of a mitigation bypass issue.

CVE-2026-110180 is a vulnerability in fast-uri version 4.0 involving host confusion due to unchecked WHATWG host canonicalization. This flaw relates to improper validation of hostnames, potentially leading to security issues. No CVSS score or detailed impact information is provided.