Skip to content
OpenAdvisories

Ecosystem

Debian

61,983 known vulnerabilities.

Most affected packages

linux 20,203 chromium 5,914 linux-6.12 2,889 thunderbird 1,432 firefox-esr 1,430 webkit2gtk 960 imagemagick 867 wireshark 771 wpewebkit 597 xen 487 ffmpeg 442 qemu 442 gpac 393 wordpress 354 freerdp2 319 binutils 301 openssl 296 mediawiki 285 tiff 272 apache2 270 phpmyadmin 263 vim 258 freerdp3 248 asterisk 229 curl 222 samba 204 nvidia-graphics-drivers 198 tcpdump 187 cacti 175 glibc 173 clamav 169 ghostscript 168 python-django 164 bind9 159 wolfssl 151 xorg-server 151 openjdk-17 150 nvidia-graphics-drivers-tesla-470 148 graphicsmagick 147 golang-1.19 143
All Critical High Medium Low Exploited only Public exploit

61,931 results · Feed

  • Critical 9.6
    CVE-2026-100794

    Sandbox escape due to incorrect boundary conditions in the Internationalization component

    Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 7.1
    CVE-2026-100792

    JIT miscompilation in the JavaScript: WebAssembly component

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100791

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100790

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100789

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.8
    CVE-2026-100788

    Invalid pointer in the JavaScript: WebAssembly component

    Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100787

    Sandbox escape in the XUL component

    Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100786

    Sandbox escape due to use-after-free in the Graphics component

    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100785

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100784

    Use-after-free in the Layout: Text and Fonts component

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 4.3
    CVE-2026-100783

    Uninitialized memory in the Audio/Video component

    Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100781

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100782

    Privilege escalation due to incorrect boundary conditions in the Graphics component

    Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100780

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100779

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100777

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100778

    Sandbox escape due to use-after-free in the DOM: Core & HTML component

    Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100776

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100775

    Sandbox escape in the Graphics component

    Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100774

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100772

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100773

    Use-after-free in the Storage: IndexedDB component

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100770

    Sandbox escape due to use-after-free in the DOM: Content Processes component

    Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.1
    CVE-2026-100771

    Undefined behavior in the DOM: Streams component

    Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100769

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100767

    Use-after-free in the Networking: Cache component

    Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 4.3
    CVE-2026-100766

    Information disclosure in the Networking: JAR component

    Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100765

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100762

    Sandbox escape due to use-after-free in the DOM: Content Processes component

    Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100760

    Sandbox escape in the Security: Process Sandboxing component

    Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.1
    CVE-2026-100759

    Uninitialized memory in the Storage: Quota Manager component

    Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.8
    CVE-2026-100757

    Use-after-free in the Widget component

    Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2026-100758

    Sandbox escape in the DOM: Navigation component

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.1
    CVE-2026-100756

    Incorrect boundary conditions in the Audio/Video: Playback component

    Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 7.1
    CVE-2026-98164

    KVM: x86/mmu: Check write tracking in all address spaces

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-95520

    Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

    A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext() that shrinks a buffer allocation to one…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Critical 9.0
    CVE-2026-15390

    Out-of-bounds write in Das U-Boot

    Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was f…

    DENX Software Engineering Das U-Boot qemu u-boot Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-95391

    Use After Free in Wireshark

    ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service

    Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  • High 8.1
    CVE-2026-95389

    Heap-based Buffer Overflow in Wireshark

    SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

    Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-95386

    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

    TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service

    Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu