| CVE-2026-124925 | NA | N/A | Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124926 | NA | N/A | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox… | 2026-11-10 |
| CVE-2026-124927 | NA | N/A | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Fir… | 2026-11-10 |
| CVE-2026-124928 | NA | N/A | Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124929 | NA | N/A | Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and… | 2026-11-10 |
| CVE-2026-124930 | NA | N/A | Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox E… | 2026-11-10 |
| CVE-2026-124931 | NA | N/A | Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and F… | 2026-11-10 |
| CVE-2026-124932 | NA | N/A | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.… | 2026-11-10 |
| CVE-2026-124933 | NA | N/A | Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.… | 2026-11-10 |
| CVE-2026-124934 | NA | N/A | Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.… | 2026-11-10 |
| CVE-2026-124935 | NA | N/A | Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefo… | 2026-11-10 |
| CVE-2026-124936 | NA | N/A | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124937 | NA | N/A | Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124938 | NA | N/A | Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ES… | 2026-11-10 |
| CVE-2026-124939 | NA | N/A | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Fi… | 2026-11-10 |
| CVE-2026-124940 | NA | N/A | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR … | 2026-11-10 |
| CVE-2026-124941 | NA | N/A | Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firef… | 2026-11-10 |
| CVE-2026-124942 | NA | N/A | Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153… | 2026-11-10 |
| CVE-2026-124943 | NA | N/A | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124944 | NA | N/A | Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124945 | NA | N/A | Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124946 | NA | N/A | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124947 | NA | N/A | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124948 | NA | N/A | Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firef… | 2026-11-10 |
| CVE-2026-124949 | NA | N/A | Other issue in the SVG component. This vulnerability was fixed in Firefox 160.… | 2026-11-10 |
| CVE-2026-124950 | NA | N/A | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefo… | 2026-11-10 |
| CVE-2026-124951 | NA | N/A | Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and F… | 2026-11-10 |
| CVE-2026-124952 | NA | N/A | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.… | 2026-11-10 |
| CVE-2026-12708 | NA | N/A | Summary
Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in i… | 2026-11-10 |
| CVE-2026-82509 | HIGH | 7.4 | V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS … | 2026-11-10 |
| CVE-2026-111262 | NA | N/A | The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before usin… | 2026-11-10 |
| CVE-2026-111263 | NA | N/A | Authentication configured for an EJB JAX-WS endpoint in the TomEE deployment descriptor is not enforced when t… | 2026-11-10 |
| CVE-2026-111264 | NA | N/A | The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some H… | 2026-11-10 |
| CVE-2026-113422 | NA | N/A | In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the … | 2026-11-10 |
| CVE-2026-114359 | NA | N/A | Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data i… | 2026-11-10 |
| CVE-2026-121885 | MEDIUM | 6.5 | A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image c… | 2026-11-10 |
| CVE-2026-123082 | NA | N/A | Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in clear… | 2026-11-10 |
| CVE-2026-86532 | NA | N/A | The bundled JAAS login modules leak whether a username exists and compare credentials in a non-constant-time m… | 2026-11-10 |
| CVE-2026-86811 | NA | N/A | The stateful session bean passivation mechanism derives the on-disk file name from a client-supplied identifie… | 2026-11-10 |
| CVE-2026-87755 | NA | N/A | Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote at… | 2026-11-10 |
| CVE-2026-87756 | NA | N/A | The internal system EJBs used for remote deployment and configuration did not enforce their administrative rol… | 2026-11-10 |
| CVE-2026-105425 | HIGH | 7.2 | OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM bef… | 2026-11-10 |
| CVE-2026-105426 | MEDIUM | 6.7 | Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote aut… | 2026-11-10 |
| CVE-2026-105427 | MEDIUM | 4.9 | Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote aut… | 2026-11-10 |
| CVE-2026-105669 | MEDIUM | 6.7 | Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated atta… | 2026-11-10 |
| CVE-2026-105813 | MEDIUM | 6.3 | Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated at… | 2026-11-10 |
| CVE-2026-107404 | MEDIUM | 4.9 | Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authentica… | 2026-11-10 |
| CVE-2026-108186 | CRITICAL | 9.6 | Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escala… | 2026-11-10 |
| CVE-2026-108187 | HIGH | 8.1 | Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalati… | 2026-11-10 |
| CVE-2026-111239 | NA | N/A | The optional SSH administration service grants full access to the administration shell to every user that auth… | 2026-11-10 |