Threats affecting pkg:generic/kimageformats

CVE-2026-53260 is a vulnerability related to the TCP implementation involving the addition of preempt_disable_nested() and preempt_enable_nested() in the reqsk_queue_hash_req() function. The advisory references Microsoft products but provides no detailed impact or exploitation information.

CVE-2026-100786 is a use-after-free vulnerability in the Graphics component of Microsoft software version 4.0 that could allow sandbox escape. The vulnerability is publicly known but has no confirmed exploits in the wild. No CVSS score or detailed impact information is provided.

CVE-2026-92059 is a vulnerability in a Microsoft Editor component caused by incorrect boundary conditions in the DOM. The issue relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided.

Memory safety bugs were fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152, and Thunderbird 152. These bugs relate to improper handling of memory which can lead to security vulnerabilities. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the bugs or their impact.

A use-after-free vulnerability has been identified in the Graphics component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the DOM: Core & HTML component of Microsoft software version 4.0. This type of flaw involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided.

CVE-2026-92057 is a vulnerability in the Enterprise Policies component of Microsoft software version 4.0 that allows a mitigation bypass. The vulnerability is identified as CWE-693. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-12324 is a vulnerability in the Microsoft Graphics: CanvasWebGL component involving incorrect boundary conditions. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and there is no indication of known exploitation in the wild or available patches.

A use-after-free vulnerability exists in the Layout: Text and Fonts component of Microsoft software version 4.0. The issue is identified as CWE-416, which involves accessing memory after it has been freed. No CVSS score or detailed impact information is provided.

A use-after-free vulnerability exists in the Graphics: Text component of Microsoft software version 4.0. This flaw involves improper handling of memory, which could potentially lead to security issues if exploited.

CVE-2026-12318 is a vulnerability in the Libraries component of Microsoft software version 4.0 involving incorrect boundary conditions. The issue relates to a CWE-119 type flaw, which typically involves improper handling of memory boundaries. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the vendor at this time.

A privilege escalation vulnerability exists in the Graphics component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to gain elevated privileges. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.

CVE-2026-7324 is a memory safety vulnerability identified in Microsoft software version 4.0. The issue relates to memory safety bugs, specifically categorized under CWE-119. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild, and no patch or remediation details are available in the provided data.

A memory safety bug identified as CVE-2026-12317 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue categorized under CWE-119. No CVSS score or detailed impact information is provided. No known exploits in the wild have been reported. The affected version explicitly stated is version 4.0.

A privilege escalation vulnerability has been identified in the DevTools component of Microsoft software version 4.0. The vulnerability is cataloged as CVE-2026-92055 and relates to improper authorization (CWE-269). No CVSS score or detailed technical impact information is provided. There is no indication of active exploitation in the wild, and no patch or remediation information is currently available.

A vulnerability in Gvfs involving a race condition in the gvfs-admin socket ownership allows local users to potentially gain root privileges. The issue is identified as CWE-367 (Time-of-check Time-of-use race condition). The affected version is 4.0. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-100781 affects Microsoft software version 4.0, involving a sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This flaw relates to improper handling of memory boundaries, categorized under CWE-119. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

Memory safety bugs have been identified and fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. These bugs relate to improper handling of memory, which can lead to potential security vulnerabilities. The specific vulnerability is tracked as CVE-2026-7323 and is associated with CWE-119, indicating a classic memory safety issue such as buffer overflows or similar. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

A mitigation bypass vulnerability exists in a Microsoft security component related to the DOM. The vulnerability is identified as CVE-2026-12316 and affects version 4.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of active exploitation in the wild or available patches at this time.

CVE-2026-100780 is a use-after-free vulnerability affecting the DOM Core and HTML component in Microsoft software version 4.0. The vulnerability has been publicly disclosed but lacks detailed technical or impact information. No CVSS score or known exploits in the wild have been reported.