vendors:Mozilla × criticity:high × limpar

Resultados

2 casos · pág. 1/1

cert.ssi.gouv.fr · há 13h high

CERT-FR: Multiple Mozilla Firefox, Firefox ESR and Thunderbird vulnerabilities allow arbitrary code execution and data disclosure

CERT-FR advisory CERTFR-2026-AVI-1346 reports multiple vulnerabilities in Mozilla products (Firefox, Firefox ESR and Thunderbird), fixed in Mozilla security bulletins mfsa2026-111 to mfsa2026-115 of 20 October 2026. According to the advisory, some of the flaws allow an attacker to achieve arbitrary code execution, breach of data confident…

CVE-2026-113399 CVE-2026-113400 CVE-2026-113401

aikido.dev · há 9h · 3 fontes · 3 atualizações high

Node.js corrige falha de escrita fora dos limites no decodificador Brotli (CVE-2026-111497, "Node2Shell"), com PoC público; Bun também afetado

The Node.js Project released security updates on October 21, 2026 for the 26.x, 24.x and 22.x lines (26.12.1, 24.22.1, 22.23.4), fixing 10 vulnerabilities: four high, three medium and three low (gbhackers.com). The most serious is CVE-2026-111497, nicknamed Node2Shell (aikido.dev), an out-of-bounds write in the bundled Brotli decoder that…

CVE-2026-111497 CVE-2026-105482 CVE-2026-105483