Search: 18.8.3.2

CVE-2026-113401 is a denial-of-service vulnerability in the PDF Viewer component of the mozjs52 product. The issue was reported by Ahmed Hesham and is classified with a medium severity and a CVSS score of 6.5. The vulnerability allows an attacker to cause a denial of service but does not impact confidentiality or integrity. It affects multiple specific versions of mozjs52, as listed. Mozilla has fixed this vulnerability in Firefox version 158.0.1.

CVE-2026-113400 is a vulnerability involving uninitialized memory in the Audio/Video cubeb component of the mozjs52 product. It has a moderate impact and a CVSS score of 5.4. The issue was addressed by Mozilla in Firefox version 158.0.1.

A denial of service vulnerability exists in libexpat versions 2.7.2 through 2.9.0 due to improper handling in the XML_ParserReset function. This function zeroes the direct byte count but does not offset tracked heap allocations, allowing an attacker to cause subsequent XML parsing operations to fail with an out-of-memory error until the parser is recreated.

DokuWiki versions before 2026-07-14c contain a PHP object injection vulnerability that allows an attacker with low privileges to execute code remotely. The vulnerability has a high severity with a CVSS score of 7.5, impacting confidentiality, integrity, and availability. Multiple specific versions of DokuWiki are affected, including various dated builds and Ubuntu package versions. No public exploits or known active exploitation have been reported. The vulnerability requires high attack complexity and no user interaction but only low privileges.

CVE-2026-113352 is a path traversal vulnerability in uTox versions up to 0.18.1. It allows Tox friends to write arbitrary files on a victim's system by sending absolute or relative pathnames when auto-accept is enabled. This can lead to overwriting critical files such as shell startup scripts or planting crafted resume records that enable code execution via manipulation of file pointers.

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.

CVE-2026-110095 is a low-severity vulnerability affecting specific versions of the node-ajv package, related to the fast-uri dependency, which is an RFC 3986 URI parser and serializer. The vulnerability has a CVSS score of 3.7 with no confidentiality or availability impact, only limited integrity impact. No known exploits are reported in the wild.

Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 contain a vulnerability identified as CVE-2026-113386. The vulnerability has a high severity with a CVSS score of 7.1, indicating it allows an attacker with low privileges to cause a partial impact on confidentiality and a high impact on integrity without user interaction. The exact nature of the vulnerability is not detailed in the provided data.

UnRTF by the GNU Project contains an out-of-bounds write vulnerability identified as CVE-2026-109831. This flaw can be triggered when a user processes crafted input, potentially leading to limited integrity and availability impacts. The vulnerability has a medium severity rating with a CVSS score of 5.4. Multiple specific versions of UnRTF are affected.

compress-lzf versions 1.0.3-1, 1.0.4-1, and 1.0.4-1build1 contain an out-of-bounds memory access vulnerability. This flaw can lead to a critical impact including high confidentiality loss and high availability impact. The vulnerability is identified as CVE-2026-109395 and has a CVSS score of 9.1, indicating a critical severity level.

CVE-2026-112901 is a medium severity vulnerability in the Pillow Python imaging library affecting versions prior to 13.0.0. The issue relates to the handling of XBM image headers. It has a CVSS 4.0 base score of 6.9, indicating a network exploitable vulnerability with low attack complexity and no required privileges or user interaction. No public exploits or known active exploitation have been reported. The affected versions include various Ubuntu package builds of Pillow up to version 3.0.0-1build1.

A critical vulnerability (CVE-2026-112900) affects the Pillow Python imaging library versions from 2.6.0 up to but not including 13.0.0. The vulnerability has a high CVSS 4.0 score of 9.2, indicating severe impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Specific technical details and exploit methods are not provided in the available data.

A medium severity vulnerability (CVE-2026-112898) affects the Pillow Python imaging library versions from 9.1.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a network exploitable issue with low impact on confidentiality. No public exploits or known active exploitation have been reported. The affected versions include various Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.

A high-severity vulnerability (CVE-2026-112897) affects the Pillow Python imaging library versions from 5.3.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The flaw allows for a high impact on confidentiality without requiring privileges or user interaction. Multiple Ubuntu package versions are listed as affected. No public exploits or vendor patch information are provided in the data.

CVE-2026-112896 is a high-severity vulnerability in the Pillow Python imaging library affecting TIFF encoding prior to version 13.0.0. The flaw allows an attacker to cause a high-impact security issue without requiring privileges or user interaction. Multiple Ubuntu package versions of Pillow are affected.

A high-severity vulnerability (CVE-2026-112895) affects the Pillow Python imaging library versions from 5.1.0 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. The affected versions include multiple Ubuntu package builds of Pillow. No public exploits or vendor patch information are provided in the data.

A high-severity vulnerability (CVE-2026-112894) affects the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 score of 8.7, indicating a significant security risk. The flaw allows for a high impact without requiring privileges or user interaction. Multiple Ubuntu package versions of Pillow are affected. No public exploits or patches are currently documented in the provided data.

A high-severity vulnerability (CVE-2026-112893) affects the Pillow Python imaging library versions from 10.0.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.2, indicating a network exploitable issue with high impact. The affected versions include several Ubuntu package builds of Pillow. No public exploits or vendor patch information are provided in the data.

Pillow, a Python imaging library, contains a high-severity vulnerability affecting versions from 4.1.0 up to 13.0.0. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. Specific details about the nature of the vulnerability are not provided in the available data. Multiple Ubuntu package versions are listed as affected. No public exploits or known active exploitation have been reported. Patch status is not confirmed due to lack of vendor advisory or patch information.