CVE-2026-16411Published
Memory safety bugs fixed in Thunderbird 153
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694495 source statements · aliases may refer to the same vulnerabilityCVE-2026-16398Published
Site isolation issue in the Graphics component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-16395Published
Integer overflow in the Audio/Video component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-16364Published
Incorrect boundary conditions in the Audio/Video: Playback component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-8093Published
Memory safety bugs fixed in Thunderbird 150.0.2
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12317Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12314Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12312Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12310Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12309Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12308Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12307Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12306Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12305Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12301Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12300Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12298Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-12290Published
Memory safety bug fixed in Thunderbird 152
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-16360Published
Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-16412Published
Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-101391Published
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via …
cve-program ·
Vendor product: Siebel Apps - Marketing
CVE-2026-16371Published
Privilege escalation in the DOM: Navigation component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-8092Published
Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-101389Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker wit…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-87409Published
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network acce…
cve-program ·
Vendor product: PeopleSoft Enterprise PeopleTools
CVE-2026-113741Published
itsourcecode Online Cake Ordering System 404.php cross site scripting
cve-program ·
Vendor product: Online Cake Ordering System
CVE-2026-114040Published
DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal
cve-program ·
Vendor product: BerryNet
CVE-2026-17557Published
Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: rhoai/odh-ta-lmes-job-rhel9
CVE-2026-114120Published
SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
cve-program ·
Vendor product: SchedulePress
CVE-2026-92768Published
Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: cockpit-machines · https://access.redhat.com/downloads/content/package-browser/: cockpit-machines
CVE-2026-92745Published
Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: cockpit-machines · https://access.redhat.com/downloads/content/package-browser/: cockpit-machines
CVE-2026-92747Published
Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: cockpit-machines · https://access.redhat.com/downloads/content/package-browser/: cockpit-machines
CVE-2026-114390Published
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers
cve-program ·
Vendor product: chamilo-lms
CVE-2026-114395Published
Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send
cve-program ·
Vendor product: trudesk
CVE-2026-84727Published
Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message
cve-program ·
https://github.com: apache/brpc
CVE-2026-114248Published
dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication
cve-program ·
Vendor product: Insurance-Management-System
CVE-2026-111849Published
WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: tour-booking-manager
CVE-2026-56386Published
Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
cve-program ·
https://github.com: apache/brpc
CVE-2026-98859Published
HID: multitouch: stop the release timer from being rearmed on remove
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98852Published
net: extend IPv6 exthdr detection of tunneled packets
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98848Published
rtc: ac100: Assign .num before accessing .hws
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98835Published
iio: accel: kionix-kx022a: Fix array boundary check
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98822Published
wifi: mac80211: prevent AP VLAN tx from other interfaces
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98808Published
net: systemport: Fix buffer overflow in bcm_sysport_get_stats()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98796Published
net: ethernet: mtk_eth_soc: allocate dummy netdev sooner
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98792Published
netfilter: flowtable: generalize pending status bit
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98783Published
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98782Published
drm/mediatek: Fix ovl adaptor platform device leak
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98781Published
drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98770Published
usb: gadget: midi2: Fix the jack descriptor array sizes
cve-program ·
Vendor product: Linux · Vendor product: Linux
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.