Threats affecting pkg:generic/kimageformats

CVE-2026-92054 is a privilege escalation vulnerability affecting version 4.0 of a Microsoft product. The vulnerability involves the Memory component. No further technical details, CVSS score, or exploitation information are provided.

Memory safety bugs were fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. The advisory references Microsoft Support Lifecycle for software support information but does not provide specific details about the vulnerabilities or their impact.

A use-after-free vulnerability exists in the XSLT component of Microsoft software version 4.0. This type of vulnerability can lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-12315 affects Microsoft software version 4.0. It involves a mitigation bypass in the DOM security component. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A sandbox escape vulnerability exists in the WebRTC Networking component of Microsoft software version 4.0 due to incorrect boundary conditions. This flaw could allow an attacker to break out of the sandbox environment.

A privilege escalation vulnerability exists in the Graphics: CanvasWebGL component of Microsoft software version 4.0 due to uninitialized memory. This flaw could potentially allow an attacker to gain elevated privileges on the affected system. No CVSS score or detailed impact information is provided, and no public exploits or patches are currently known.

A use-after-free vulnerability exists in the DOM Core & HTML component of Microsoft software version 4.0, which could allow a sandbox escape. The vulnerability is identified as CVE-2026-100778. No CVSS score or detailed impact information is provided.

A memory safety bug identified as CVE-2026-12314 was fixed in Thunderbird 152. The vulnerability relates to a memory safety issue, but no detailed technical information or impact specifics are provided. The affected product is Microsoft-related software version 4.0. No CVSS score or exploit information is available.

CVE-2026-7320 is an information disclosure vulnerability in the Audio/Video component of Microsoft software version 4.0 caused by incorrect boundary conditions. The flaw could potentially allow unauthorized access to sensitive information. No CVSS score or detailed impact information is provided.

CVE-2026-92051 is a spoofing vulnerability in a Microsoft Graphics component caused by an invalid pointer. The issue is identified in version 4.0 of the affected software. No CVSS score or detailed impact information is provided, and no known exploits or patches are currently documented.

A memory safety vulnerability identified as CVE-2026-12312 has been fixed in Thunderbird 152. The vulnerability is categorized under CWE-119, which involves issues related to improper restriction of operations within the bounds of a memory buffer. No CVSS score or detailed impact information is provided. The affected version explicitly stated is version 4.0. No known exploits in the wild have been reported, and no patch links or vendor advisory details are available.

A use-after-free vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0. This vulnerability has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits in the wild have been reported.

A memory safety vulnerability identified as CVE-2026-12310 has been fixed in Thunderbird 152. The vulnerability relates to a memory safety bug categorized under CWE-119. No CVSS score or detailed impact information is provided in the available data.

CVE-2026-4726 is a denial-of-service vulnerability in a Microsoft XML component affecting version 4.0. The vulnerability is publicly known but lacks detailed technical information and a CVSS score. No patch or remediation details are provided.

CVE-2026-92050 is a vulnerability in the XPConnect component of Microsoft software version 4.0, involving a race condition that could allow sandbox escape. The vulnerability is identified as a concurrency issue (CWE-362). No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available from the vendor at this time.

A use-after-free vulnerability exists in the JavaScript WebAssembly component of Microsoft software version 4.0. This flaw could potentially lead to memory corruption issues. No CVSS score or detailed impact information is provided.

A memory safety vulnerability identified as CVE-2026-12305 has been fixed in Thunderbird 152. The vulnerability is related to improper memory handling, categorized under CWE-119. No CVSS score or detailed impact information is provided. No known exploits are reported in the wild. The affected version explicitly stated is version 4.0.

A use-after-free vulnerability exists in the Graphics: Canvas2D component of Microsoft software version 4.0, which could allow a sandbox escape. This vulnerability has been publicly disclosed but lacks detailed technical or impact information and no CVSS score is provided.

A use-after-free vulnerability has been identified in the Widget: Win32 component of Microsoft software version 4.0. This type of vulnerability involves accessing memory after it has been freed, which can lead to undefined behavior or potential exploitation. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

CVE-2026-100775 is a sandbox escape vulnerability in the Graphics component of Microsoft software version 4.0. The vulnerability allows an attacker to break out of the restricted sandbox environment, potentially leading to unauthorized actions outside the sandbox. No CVSS score or detailed impact information is provided. No patch or remediation details are available at this time.