Vulnerability-Lookup

GCVE-1988-2026-0539

Vulnerability from gna-1988 – Published: 2026-11-02 10:03 – Updated: 2026-11-02 10:03

Title

[Bugtraq] [slackware-security] mozilla-firefox (SSA:2026-272-01)

Summary

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] mozilla-firefox (SSA:2026-272-01) New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/firefox/140.17.0/releasenotes/ https://www.mozilla.org/security/advisories/mfsa2026-99/ https://www.cve.org/CVERecord?id=CVE-2026-100756 https://www.cve.org/CVERecord?id=CVE-2026-100757 https://www.cve.org/CVERecord?id=CVE-2026-100758 https://www.cve.org/CVERecord?id=CVE-2026-100759 https://www.cve.org/CVERecord?id=CVE-2026-100762 https://www.cve.org/CVERecord?id=CVE-2026-92035 https://www.cve.org/CVERecord?id=CVE-2026-100766 https://www.cve.org/CVERecord?id=CVE-2026-100767 https://www.cve.org/CVERecord?id=CVE-2026-100769 https://www.cve.org/CVERecord?id=CVE-2026-100770 https://www.cve.org/CVERecord?id=CVE-2026-100771 https://www.cve.org/CVERecord?id=CVE-2026-100772 https://www.cve.org/CVERecord?id=CVE-2026-100773 https://www.cve.org/CVERecord?id=CVE-2026-100774 https://www.cve.org/CVERecord?id=CVE-2026-100775 https://www.cve.org/CVERecord?id=CVE-2026-100776 https://www.cve.org/CVERecord?id=CVE-2026-100777 https://www.cve.org/CVERecord?id=CVE-2026-100778 https://www.cve.org/CVERecord?id=CVE-2026-100779 https://www.cve.org/CVERecord?id=CVE-2026-100780 https://www.cve.org/CVERecord?id=CVE-2026-100781 https://www.cve.org/CVERecord?id=CVE-2026-100782 https://www.cve.org/CVERecord?id=CVE-2026-100783 https://www.cve.org/CVERecord?id=CVE-2026-100784 https://www.cve.org/CVERecord?id=CVE-2026-100785 https://www.cve.org/CVERecord?id=CVE-2026-100786 https://www.cve.org/CVERecord?id=CVE-2026-100788 https://www.cve.org/CVERecord?id=CVE-2026-100789 https://www.cve.org/CVERecord?id=CVE-2026-100790 https://www.cve.org/CVERecord?id=CVE-2026-100791 https://www.cve.org/CVERecord?id=CVE-2026-100832 https://www.cve.org/CVERecord?id=CVE-2026-100792 https://www.cve.org/CVERecord?id=CVE-2026-100794 https://www.cve.org/CVERecord?id=CVE-2026-96869 https://www.cve.org/CVERecord?id=CVE-2026-100797 https://www.cve.org/CVERecord?id=CVE-2026-100801 https://www.cve.org/CVERecord?id=CVE-2026-100803 https://www.cve.org/CVERecord?id=CVE-2026-100807 https://www.cve.org/CVERecord?id=CVE-2026-100811 https://www.cve.org/CVERecord?id=CVE-2026-100818 https://www.cve.org/CVERecord?id=CVE-2026-100819 https://www.cve.org/CVERecord?id=CVE-2026-100820 https://www.cve.org/CVERecord?id=CVE-2026-100821 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-firefox-140.17.0esr-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-153.4.0esr-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-153.4.0esr-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: 3fc1777290f8ab65c556f64d4d38de15 mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz Slackware x86_64 15.0 package: dd688c903a9423ea04b281f5614a8997 mozilla-firefox-140.17.0esr-x86_64-1_slack15.0.txz Slackware -current package: 369c9c95bbfecf97325a15f193d02409 xap/mozilla-firefox-153.4.0esr-i686-1.txz Slackware x86_64 -current package: 10861addfab60adb1704172fbcba038b xap/mozilla-firefox-153.4.0esr-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarxCGhsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjP0+gCglAmHghy/FkEmchLHrIKT MuWhQ3oAoJLXpe0lVrW8kpATpd37x7VURYPf =G/hy -----END PGP SIGNATURE-----

Severity

No CVSS data available.

Assigner

VULNARCHIVE GNA GNA-1988

GNA scorecard E 38/100 over 552 records in the last 180 days details

References

50 references

URL	Tags
https://vuln.freearchive.org/archive/item/80d9829…	technical-description
https://lists.securityfocus.com/hyperkitty/list/b…	technical-description
http://osuosl.org
http://slackware.com
http://slackware.com/gpg-key
https://www.cve.org/CVERecord?id=CVE-2026-100756
https://www.cve.org/CVERecord?id=CVE-2026-100757
https://www.cve.org/CVERecord?id=CVE-2026-100758
https://www.cve.org/CVERecord?id=CVE-2026-100759
https://www.cve.org/CVERecord?id=CVE-2026-100762
https://www.cve.org/CVERecord?id=CVE-2026-100766
https://www.cve.org/CVERecord?id=CVE-2026-100767
https://www.cve.org/CVERecord?id=CVE-2026-100769
https://www.cve.org/CVERecord?id=CVE-2026-100770
https://www.cve.org/CVERecord?id=CVE-2026-100771
https://www.cve.org/CVERecord?id=CVE-2026-100772
https://www.cve.org/CVERecord?id=CVE-2026-100773
https://www.cve.org/CVERecord?id=CVE-2026-100774
https://www.cve.org/CVERecord?id=CVE-2026-100775
https://www.cve.org/CVERecord?id=CVE-2026-100776
https://www.cve.org/CVERecord?id=CVE-2026-100777
https://www.cve.org/CVERecord?id=CVE-2026-100778
https://www.cve.org/CVERecord?id=CVE-2026-100779
https://www.cve.org/CVERecord?id=CVE-2026-100780
https://www.cve.org/CVERecord?id=CVE-2026-100781
https://www.cve.org/CVERecord?id=CVE-2026-100782
https://www.cve.org/CVERecord?id=CVE-2026-100783
https://www.cve.org/CVERecord?id=CVE-2026-100784
https://www.cve.org/CVERecord?id=CVE-2026-100785
https://www.cve.org/CVERecord?id=CVE-2026-100786
https://www.cve.org/CVERecord?id=CVE-2026-100788
https://www.cve.org/CVERecord?id=CVE-2026-100789
https://www.cve.org/CVERecord?id=CVE-2026-100790
https://www.cve.org/CVERecord?id=CVE-2026-100791
https://www.cve.org/CVERecord?id=CVE-2026-100792
https://www.cve.org/CVERecord?id=CVE-2026-100794
https://www.cve.org/CVERecord?id=CVE-2026-100797
https://www.cve.org/CVERecord?id=CVE-2026-100801
https://www.cve.org/CVERecord?id=CVE-2026-100803
https://www.cve.org/CVERecord?id=CVE-2026-100807
https://www.cve.org/CVERecord?id=CVE-2026-100811
https://www.cve.org/CVERecord?id=CVE-2026-100818
https://www.cve.org/CVERecord?id=CVE-2026-100819
https://www.cve.org/CVERecord?id=CVE-2026-100820
https://www.cve.org/CVERecord?id=CVE-2026-100821
https://www.cve.org/CVERecord?id=CVE-2026-100832
https://www.cve.org/CVERecord?id=CVE-2026-92035
https://www.cve.org/CVERecord?id=CVE-2026-96869
https://www.mozilla.org/en-US/firefox/140.17.0/re…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

1 product

Vendor	Product	Version	CPE status
Mozilla	SSA:2026-272-01	Affected: unknown	guessed

Credits

Slackware Security Team

Relationships

reference GCVE-1988-2026-0539 (this record)

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "SSA:2026-272-01",
          "vendor": "Mozilla",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Slackware Security Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security]  mozilla-firefox (SSA:2026-272-01)\nNew mozilla-firefox packages are available for Slackware 15.0 and -current to\nfix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz:  Upgraded.\nThis update contains security fixes and improvements.\nFor more information, see:\nhttps://www.mozilla.org/en-US/firefox/140.17.0/releasenotes/\nhttps://www.mozilla.org/security/advisories/mfsa2026-99/\nhttps://www.cve.org/CVERecord?id=CVE-2026-100756\nhttps://www.cve.org/CVERecord?id=CVE-2026-100757\nhttps://www.cve.org/CVERecord?id=CVE-2026-100758\nhttps://www.cve.org/CVERecord?id=CVE-2026-100759\nhttps://www.cve.org/CVERecord?id=CVE-2026-100762\nhttps://www.cve.org/CVERecord?id=CVE-2026-92035\nhttps://www.cve.org/CVERecord?id=CVE-2026-100766\nhttps://www.cve.org/CVERecord?id=CVE-2026-100767\nhttps://www.cve.org/CVERecord?id=CVE-2026-100769\nhttps://www.cve.org/CVERecord?id=CVE-2026-100770\nhttps://www.cve.org/CVERecord?id=CVE-2026-100771\nhttps://www.cve.org/CVERecord?id=CVE-2026-100772\nhttps://www.cve.org/CVERecord?id=CVE-2026-100773\nhttps://www.cve.org/CVERecord?id=CVE-2026-100774\nhttps://www.cve.org/CVERecord?id=CVE-2026-100775\nhttps://www.cve.org/CVERecord?id=CVE-2026-100776\nhttps://www.cve.org/CVERecord?id=CVE-2026-100777\nhttps://www.cve.org/CVERecord?id=CVE-2026-100778\nhttps://www.cve.org/CVERecord?id=CVE-2026-100779\nhttps://www.cve.org/CVERecord?id=CVE-2026-100780\nhttps://www.cve.org/CVERecord?id=CVE-2026-100781\nhttps://www.cve.org/CVERecord?id=CVE-2026-100782\nhttps://www.cve.org/CVERecord?id=CVE-2026-100783\nhttps://www.cve.org/CVERecord?id=CVE-2026-100784\nhttps://www.cve.org/CVERecord?id=CVE-2026-100785\nhttps://www.cve.org/CVERecord?id=CVE-2026-100786\nhttps://www.cve.org/CVERecord?id=CVE-2026-100788\nhttps://www.cve.org/CVERecord?id=CVE-2026-100789\nhttps://www.cve.org/CVERecord?id=CVE-2026-100790\nhttps://www.cve.org/CVERecord?id=CVE-2026-100791\nhttps://www.cve.org/CVERecord?id=CVE-2026-100832\nhttps://www.cve.org/CVERecord?id=CVE-2026-100792\nhttps://www.cve.org/CVERecord?id=CVE-2026-100794\nhttps://www.cve.org/CVERecord?id=CVE-2026-96869\nhttps://www.cve.org/CVERecord?id=CVE-2026-100797\nhttps://www.cve.org/CVERecord?id=CVE-2026-100801\nhttps://www.cve.org/CVERecord?id=CVE-2026-100803\nhttps://www.cve.org/CVERecord?id=CVE-2026-100807\nhttps://www.cve.org/CVERecord?id=CVE-2026-100811\nhttps://www.cve.org/CVERecord?id=CVE-2026-100818\nhttps://www.cve.org/CVERecord?id=CVE-2026-100819\nhttps://www.cve.org/CVERecord?id=CVE-2026-100820\nhttps://www.cve.org/CVERecord?id=CVE-2026-100821\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project!  :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-firefox-140.17.0esr-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-153.4.0esr-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-153.4.0esr-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\n3fc1777290f8ab65c556f64d4d38de15  mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz\nSlackware x86_64 15.0 package:\ndd688c903a9423ea04b281f5614a8997  mozilla-firefox-140.17.0esr-x86_64-1_slack15.0.txz\nSlackware -current package:\n369c9c95bbfecf97325a15f193d02409  xap/mozilla-firefox-153.4.0esr-i686-1.txz\nSlackware x86_64 -current package:\n10861addfab60adb1704172fbcba038b  xap/mozilla-firefox-153.4.0esr-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg mozilla-firefox-140.17.0esr-i686-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list:                          |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message:                                                     |\n|                                                                        |\n|   unsubscribe slackware-security                                       |\n|                                                                        |\n| You will get a confirmation message back containing instructions to    |\n| complete the process.  Please do not reply to this email address.      |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarxCGhsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjP0+gCglAmHghy/FkEmchLHrIKT\nMuWhQ3oAoJLXpe0lVrW8kpATpd37x7VURYPf\n=G/hy\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T10:03:01Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/80d9829ccd5c87db5864aa0cefb33d9e795ba8b13046f7f0c9b4d95539534e44"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/TWJ6W35DXWKTKU5QPY2ZRV2XEVB7LMVS/"
        },
        {
          "url": "http://osuosl.org"
        },
        {
          "url": "http://slackware.com"
        },
        {
          "url": "http://slackware.com/gpg-key"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100756"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100757"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100758"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100759"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100762"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100766"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100767"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100769"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100770"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100771"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100772"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100773"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100774"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100775"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100776"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100777"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100778"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100779"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100780"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100781"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100782"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100783"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100784"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100785"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100786"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100788"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100789"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100790"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100791"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100792"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100794"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100797"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100801"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100803"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100807"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100811"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100818"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100819"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100820"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100821"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-100832"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-92035"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96869"
        },
        {
          "url": "https://www.mozilla.org/en-US/firefox/140.17.0/releasenotes/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-99/"
        }
      ],
      "source": {
        "defect": [
          "alpine.LNX.2.02.2609291617330.16589%40connie.slackware.com"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [slackware-security] mozilla-firefox (SSA:2026-272-01)",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-100756",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100757",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100758",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100759",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100762",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100766",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100767",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100769",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100770",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100771",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100772",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100773",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100774",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100775",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100776",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100777",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100778",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100779",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100780",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100781",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100782",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100783",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100784",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100785",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100786",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100788",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100790",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100791",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100792",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100794",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100797",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100801",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100803",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100807",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100811",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100818",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100819",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100820",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100821",
              "type": "related"
            },
            {
              "destId": "CVE-2026-100832",
              "type": "related"
            },
            {
              "destId": "CVE-2026-92035",
              "type": "related"
            },
            {
              "destId": "CVE-2026-96869",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0539",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/80d9829ccd5c87db5864aa0cefb33d9e795ba8b13046f7f0c9b4d95539534e44",
            "automated": true,
            "contentSha256": "80d9829ccd5c87db5864aa0cefb33d9e795ba8b13046f7f0c9b4d95539534e44",
            "evidenceScore": 6,
            "messageId": "alpine.LNX.2.02.2609291617330.16589%40connie.slackware.com",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/TWJ6W35DXWKTKU5QPY2ZRV2XEVB7LMVS/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T10:03:01Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0539"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T10:03:01Z",
    "dateUpdated": "2026-11-02T10:03:01Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0539"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-100832 (GCVE-0-2026-100832)

Vulnerability from cvelistv5 – Published: 2026-09-29 12:36 – Updated: 2026-09-30 17:20

Title

Use-after-free in the Graphics: Canvas2D component

Summary

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 13:09 UTC

CWE

CWE-416 - Use After Free

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 683 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2072467
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.42 , ≤ 115.* (rpm) Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.4 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.4 , ≤ * (rpm)

Credits

Mozilla

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-100832",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T13:09:07.999512Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T13:09:12.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.42",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "153.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "153.4",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mozilla"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17."
            }
          ],
          "value": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T17:20:34.544Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2072467"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-100/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-102/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-103/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-98/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-99/"
        }
      ],
      "title": "Use-after-free in the Graphics: Canvas2D component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-100832",
    "datePublished": "2026-09-29T12:36:35.869Z",
    "dateReserved": "2026-09-26T19:19:05.827Z",
    "dateUpdated": "2026-09-30T17:20:34.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-92035 (GCVE-0-2026-92035)

Vulnerability from cvelistv5 – Published: 2026-09-15 12:33 – Updated: 2026-09-30 17:19

Title

Sandbox escape due to incorrect boundary conditions in the Graphics component

Summary

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-21 17:10 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 683 records in the last 180 days details

References

8 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2061245
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.42 , ≤ 115.* (rpm) Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.3 , ≤ 153.* (rpm) Unaffected: 156 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.3 , ≤ 153.* (rpm) Unaffected: 156 , ≤ * (rpm)

Credits

Mozilla

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-92035",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-21T17:10:15.352556Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-21T17:11:04.448Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.42",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "153.*",
              "status": "unaffected",
              "version": "153.3",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "156",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "153.*",
              "status": "unaffected",
              "version": "153.3",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "156",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mozilla"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17."
            }
          ],
          "value": "Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T17:19:54.875Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2061245"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-102/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-90/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-93/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-96/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-98/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-99/"
        }
      ],
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-92035",
    "datePublished": "2026-09-15T12:33:56.003Z",
    "dateReserved": "2026-09-15T12:33:55.496Z",
    "dateUpdated": "2026-09-30T17:19:54.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-96869 (GCVE-0-2026-96869)

Vulnerability from cvelistv5 – Published: 2026-09-29 12:36 – Updated: 2026-09-30 17:20

Title

Information disclosure in the Networking component

Summary

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 14:35 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 683 records in the last 180 days details

References

7 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2041248
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Thunderbird	Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.4 , ≤ 153.* (rpm) Unaffected: 157 , ≤ * (rpm)
Mozilla	Firefox	Unaffected: 140.17 , ≤ 140.* (rpm) Unaffected: 153.4 , ≤ 153.* (rpm) Unaffected: 157 , ≤ * (rpm)

Credits

Carlo Di Dato

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-96869",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T14:35:35.881077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T14:35:59.911Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "153.*",
              "status": "unaffected",
              "version": "153.4",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "157",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.17",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "153.*",
              "status": "unaffected",
              "version": "153.4",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "157",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Carlo Di Dato"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17."
            }
          ],
          "value": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T17:20:38.391Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2041248"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-100/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-101/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-102/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-103/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-97/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-99/"
        }
      ],
      "title": "Information disclosure in the Networking component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2026-96869",
    "datePublished": "2026-09-29T12:36:15.110Z",
    "dateReserved": "2026-09-23T18:05:43.142Z",
    "dateUpdated": "2026-09-30T17:20:38.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

GCVE-1988-2026-0539

CVE-2026-100832 (GCVE-0-2026-100832)

CVE-2026-92035 (GCVE-0-2026-92035)

CVE-2026-96869 (GCVE-0-2026-96869)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour