Threats affecting pkg:generic/zxc

A use-after-free vulnerability exists in the JavaScript Engine's JIT component in Microsoft product version 4.0. This type of flaw can potentially lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A sandbox escape vulnerability exists in the Remote Settings Client component of Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

A use-after-free vulnerability exists in the Disability Access APIs component of Microsoft software version 4.0, which could allow a sandbox escape. This vulnerability is identified as CVE-2026-4688 and is publicly disclosed but lacks detailed technical or impact information. No CVSS score or patch information is currently available.

A privilege escalation vulnerability has been identified in the Places component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-100824 and relates to improper access control (CWE-269). No CVSS score or detailed technical impact information is provided. No patch or remediation details are currently available.

CVE-2026-4687 is a vulnerability in the Microsoft Telemetry component caused by incorrect boundary conditions that could allow a sandbox escape. This flaw affects version 4.0 of the affected software. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches at this time.

A privilege escalation vulnerability exists in the Address Bar component of Microsoft software version 4.0. The issue is identified as CWE-269, indicating improper privileges management. No CVSS score or detailed impact information is provided.

CVE-2026-4686 is a vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue is documented without detailed technical or impact information. No CVSS score or known exploits are reported.

A vulnerability identified as CVE-2026-100819 affects Microsoft software version 4.0. It involves a sandbox escape caused by incorrect boundary conditions in the XPCOM component. This flaw could potentially allow an attacker to break out of the sandbox environment, but no further exploitation details or impact specifics are provided.

This entry references internally found bugs fixed in various Firefox ESR versions and Firefox 154, but the provided data relates to a Microsoft vulnerability (CVE-2026-74990) with minimal details. The description does not specify the nature of the vulnerability or its impact. No patch information or remediation details are provided.

CVE-2026-4685 is a vulnerability in the Graphics: Canvas2D component of Microsoft software version 4.0 involving incorrect boundary conditions. The description and details are minimal, and no CVSS score or detailed impact information is provided.

A use-after-free vulnerability in the Widget component of the Gtk library in Microsoft product version 4.0 allows for a sandbox escape. This vulnerability is identified as CVE-2026-100818 and is categorized under CWE-416. No CVSS score or patch information is currently available.

CVE-2026-4684 is a vulnerability involving a race condition and use-after-free in the Graphics: WebRender component of Microsoft software version 4.0. The issue is publicly known but lacks detailed technical or impact information and no CVSS score is provided.

A site isolation issue has been identified in the DOM networking component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-100816 and is associated with CWE-346, which relates to insufficient authorization. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild, and no patch or remediation details are currently available.

A use-after-free vulnerability exists in the CSS Parsing and Computation component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential security issues.

This vulnerability involves incorrect boundary conditions in the JavaScript Engine's Just-In-Time (JIT) component in Microsoft software version 4.0. The issue is categorized under CWE-119, indicating a potential buffer-related error. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild, and no patch or remediation details are available.

CVE-2026-100813 is a vulnerability involving an invalid pointer in the JavaScript Engine's JIT component in Microsoft software version 4.0. The vulnerability is identified as CWE-763. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available at this time.

A use-after-free vulnerability in the DOM Core & HTML component of Microsoft software version 4.0 can lead to a sandbox escape. This vulnerability allows an attacker to potentially break out of the restricted execution environment. No CVSS score or detailed impact information is provided.

CVE-2026-100810 is a vulnerability in the DevTools component of Microsoft software version 4.0. The available information is limited and does not specify the nature of the issue beyond referencing a CWE-200 classification, which relates to information exposure. No CVSS score or detailed impact description is provided.

CVE-2026-100809 is a vulnerability involving a same-origin policy bypass in the DevTools component of Microsoft software version 4.0. The same-origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. This bypass could potentially allow unauthorized access to restricted resources. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available at this time.

A mitigation bypass vulnerability exists in the DOM Service Workers component of Microsoft software version 4.0. The vulnerability is identified as CVE-2026-100808 and is categorized under CWE-693. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.