Threats affecting pkg:generic/zxc

CVE-2026-4695 is a vulnerability in the Audio/Video: Web Codecs component of Microsoft software version 4.0, involving incorrect boundary conditions. The vulnerability is documented but lacks detailed technical or impact information. No CVSS score or exploit details are available.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges if successfully exploited. No CVSS score or detailed impact metrics are provided. No known exploits in the wild have been reported, and no patch information is available.

CVE-2026-8090 is a use-after-free vulnerability in the DOM networking component of Microsoft software version 4.0. The vulnerability involves improper handling of memory leading to potential use of freed memory. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges if successfully exploited. No CVSS score or detailed impact information is provided.

CVE-2026-4694 is a vulnerability in the Microsoft Graphics component involving incorrect boundary conditions and an integer overflow. The issue affects version 4.0 of the product. No CVSS score or detailed impact information is provided. No known exploits or patches are currently documented.

CVE-2026-100832 is a use-after-free vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0. The vulnerability is publicly known but lacks detailed technical or impact information and no CVSS score is assigned.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-4693 is a vulnerability in the Microsoft Audio/Video Playback component caused by incorrect boundary conditions. The flaw is identified as CWE-754, which relates to improper handling of boundary conditions. No CVSS score or detailed impact information is provided. The affected version is Microsoft version 4.0. No patch or remediation details are available in the provided data.

A use-after-free vulnerability exists in the DOM UI Events & Focus Handling component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could potentially allow an attacker to gain elevated privileges.

CVE-2026-4692 is a vulnerability involving a sandbox escape in the Responsive Design Mode component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported.

CVE-2026-100830 is a vulnerability in Microsoft software version 4.0 involving a mitigation bypass in the DOM Navigation component. No detailed technical information or impact description is provided beyond the identification of the flaw and affected version.

A use-after-free vulnerability exists in the CSS Parsing and Computation component of Microsoft software version 4.0. This type of flaw can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges within the affected system.

CVE-2026-78376 is a use-after-free vulnerability in Webkitgtk related to jscvalue function parameters. This type of flaw can lead to memory corruption issues. The vulnerability affects version 4.0 of the product. No CVSS score or detailed impact information is provided.

A mitigation bypass vulnerability exists in a Microsoft security component related to the DOM. The specific details of the vulnerability and its impact are not provided in the available data. The affected version is exactly 4.0. No CVSS score or detailed impact information is available.

CVE-2026-4690 is a vulnerability in the Microsoft XPCOM component involving incorrect boundary conditions and an integer overflow that could lead to a sandbox escape. The affected version is 4.0. No CVSS score or detailed impact information is provided.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges within the affected environment.

A mitigation bypass vulnerability exists in the Bookmarks & History component of Microsoft software version 4.0. The vulnerability has been published but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

CVE-2026-4689 is a vulnerability in the Microsoft XPCOM component involving incorrect boundary conditions and an integer overflow that can lead to sandbox escape. The affected version is 4.0. No CVSS score or detailed impact information is provided.