Threats affecting pkg:generic/zxc

CVE-2026-8389 is a vulnerability involving a JIT miscompilation issue in the JavaScript engine's JIT component of Microsoft software version 4.0. The description and details are minimal, providing no specific technical or impact information beyond the identification of the flaw.

CVE-2026-6750 is a privilege escalation vulnerability in the Graphics: WebRender component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical or impact information and no CVSS score is provided.

CVE-2026-92017 is a privilege escalation vulnerability in the Service Workers component of Microsoft software version 4.0. The vulnerability allows an attacker to escalate privileges within the affected component. No CVSS score or detailed technical information is provided.

CVE-2026-4699 is a vulnerability in Microsoft software version 4.0 related to incorrect boundary conditions in the Layout: Text and Fonts component. The issue has been published but lacks detailed technical information, CVSS scoring, or known exploitation reports. No patch or remediation details are provided in the available data.

CVE-2026-8388 is a vulnerability in the JavaScript Engine's JIT component related to incorrect boundary conditions. The information provided is limited and does not include details on impact, exploitation, or remediation.

A use-after-free vulnerability exists in the Disability Access APIs component of Microsoft software version 4.0. This vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported, and no patch or remediation details are provided.

An information disclosure vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0 due to uninitialized memory. This flaw could potentially allow unauthorized access to sensitive information. No CVSS score or detailed impact information is provided.

A Just-In-Time (JIT) miscompilation vulnerability exists in the JavaScript engine component of Microsoft software version 4.0. The issue relates to the JIT compiler generating incorrect code during execution.

CVE-2026-83596 is a vulnerability in Webkitgtk related to validating the full featurelist array in the opentypeverticaldata findfeature function. The vulnerability is identified as a CWE-120 type, which typically involves buffer overflows or improper memory handling. No CVSS score or detailed impact information is provided.

An uninitialized memory vulnerability exists in the Audio/Video: Web Codecs component of Microsoft software version 4.0. The issue was publicly disclosed on November 14, 2026. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available in the provided data.

A privilege escalation vulnerability exists in the WebExtensions component of Microsoft software version 4.0. This vulnerability could allow an attacker to gain elevated privileges within the affected component. No CVSS score or detailed impact information is provided.

CVE-2026-4697 is a vulnerability in the Audio/Video: Web Codecs component of Microsoft software version 4.0 caused by incorrect boundary conditions. The issue is documented but lacks detailed public technical information and CVSS scoring. No known exploits in the wild have been reported, and no patch or remediation details are provided in the available data.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability has been identified in the WebRTC component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild or available patches at this time.

CVE-2026-10701 is a vulnerability in the Graphics: Text component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, with no CVSS score or public exploit information available.

CVE-2026-4696 is a use-after-free vulnerability in the Layout: Text and Fonts component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use of freed memory, potentially causing application crashes or other unintended behavior.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-6746 is a use-after-free vulnerability in the DOM: Core & HTML component of Microsoft software version 4.0. The vulnerability involves improper memory handling that could lead to use-after-free conditions.

CVE-2026-106016 is a vulnerability in the File Handling component of Microsoft software version 4.0 that allows mitigation bypass. No specific technical details or impact descriptions are provided beyond the identification of the vulnerability and affected version.

CVE-2026-8093 addresses memory safety bugs fixed in Thunderbird version 4.0. The vulnerability is related to improper memory handling, categorized under CWE-119. No CVSS score or detailed impact information is provided.