Security Box Score — October 13, 2026 — page 5
Edition of October 13, 2026, continued — page 5 of 5. Back to page 1 · page 4
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-95124 | await | — | n/a | n/a | — | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remot… |
| CVE-2026-95127 | await | — | n/a | n/a | — | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of ser… |
| CVE-2026-102699 | await | — | Xen | Xen | — | Arm: multiple issues with GNTTABOP_cache_flush |
| CVE-2026-102700 | await | — | Xen | Xen | — | gnttab: cache-flush handling may cause page reference leak |
| CVE-2026-102702 | await | — | Xen | Xen | — | Arm: multiple issues with GNTTABOP_cache_flush |
| CVE-2026-104584 | await | — | n/a | n/a | — | reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f12559… |
| CVE-2026-104585 | await | — | n/a | n/a | — | Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection i… |
| CVE-2026-104587 | await | — | n/a | n/a | — | blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (… |
| CVE-2026-104937 | await | — | Shopware | Shopware | — | CVE-2026-104937 |
| CVE-2026-107460 | await | — | Apache Software Foundation | Apache Fesod (Incubating) | CWE-918 | Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS r… |
| CVE-2026-109704 | await | — | Mozilla | Firefox | — | Privilege escalation in the Application Update component |
| CVE-2026-109708 | await | — | Mozilla | Firefox | — | Sandbox escape due to incorrect boundary conditions in the Networking component |
| CVE-2026-109712 | await | — | Mozilla | Firefox | — | Sandbox escape due to uninitialized memory in the Graphics component |
| CVE-2026-109714 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the Layout component |
| CVE-2026-109715 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the JavaScript Engine component |
| CVE-2026-109716 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the JavaScript Engine component |
| CVE-2026-109720 | await | — | Mozilla | Firefox | — | JIT miscompilation in the JavaScript: WebAssembly component |
| CVE-2026-109721 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the JavaScript Engine: JIT component |
| CVE-2026-109722 | await | — | Mozilla | Firefox | — | JIT miscompilation in the JavaScript Engine: JIT component |
| CVE-2026-109723 | await | — | Mozilla | Firefox | — | Integer overflow in the Layout: Text and Fonts component |
| CVE-2026-109730 | await | — | Mozilla | Firefox | — | Integer overflow in the Graphics component |
| CVE-2026-109731 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the Graphics: Canvas2D component |
| CVE-2026-109733 | await | — | Mozilla | Firefox | — | JIT miscompilation in the JavaScript Engine: JIT component |
| CVE-2026-109734 | await | — | Mozilla | Firefox | — | Mitigation bypass in the DOM: Security component |
| CVE-2026-109736 | await | — | Mozilla | Firefox | — | Frame poisoning in the Layout component |
| CVE-2026-109737 | await | — | Mozilla | Firefox | — | Mitigation bypass in the Enterprise Policies component |
| CVE-2026-109739 | await | — | Mozilla | Firefox | — | Privilege escalation in the WebExtensions component |
| CVE-2026-109740 | await | — | Mozilla | Firefox | — | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 comp… |
| CVE-2026-109743 | await | — | Mozilla | Firefox | — | Privilege escalation in the Panning and Zooming component |
| CVE-2026-109744 | await | — | Mozilla | Firefox | — | Other issue in the DOM: File component |
| CVE-2026-109745 | await | — | Mozilla | Firefox | — | Sandbox escape due to uninitialized memory in the DOM: Web Serial component |
| CVE-2026-109746 | await | — | Mozilla | Firefox | — | Mitigation bypass in the DOM: Security component |
| CVE-2026-109747 | await | — | Mozilla | Firefox | — | Other issue in the Address Bar component |
| CVE-2026-109750 | await | — | Mozilla | Firefox | — | Site isolation issue in the DOM: Web Authentication component |
| CVE-2026-109753 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the Layout component |
| CVE-2026-109754 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the DOM: Editor component |
| CVE-2026-109755 | await | — | Mozilla | Firefox | — | Sandbox escape in the DOM: Content Processes component |
| CVE-2026-109757 | await | — | Mozilla | Firefox | — | Sandbox escape due to race condition in the Networking component |
| CVE-2026-109759 | await | — | Mozilla | Firefox | — | Site isolation issue in the Networking component |
| CVE-2026-109760 | await | — | Mozilla | Firefox | — | Mitigation bypass in the Networking: HTTP component |
| CVE-2026-109762 | await | — | Mozilla | Firefox | — | Incorrect boundary conditions in the SVG component |
| CVE-2026-109763 | await | — | Mozilla | Firefox | — | Mitigation bypass in the File Handling component |
| CVE-2026-109764 | await | — | Mozilla | Firefox | — | Mitigation bypass in the Enterprise Policies component |
| CVE-2026-109766 | await | — | Mozilla | Firefox | — | Mitigation bypass in the Enterprise Policies component |
| CVE-2026-109770 | await | — | Mozilla | Firefox | — | Spoofing issue in the DOM: Web Serial component |
| CVE-2026-109772 | await | — | Mozilla | Firefox | — | Same-origin policy bypass in the DevTools component |
| CVE-2026-109774 | await | — | Mozilla | Firefox | — | Invalid pointer, undefined behavior in the DOM: Notifications component |
| CVE-2026-109776 | await | — | Mozilla | Firefox | — | Race condition in the XPCOM component |
| CVE-2026-109780 | await | — | Mozilla | Firefox | — | Mitigation bypass in the DOM: Core & HTML component |
| CVE-2026-109782 | await | — | Mozilla | Firefox | — | Mitigation bypass in the File Handling component |
| CVE-2026-109783 | await | — | Mozilla | Firefox | — | Mitigation bypass in the File Handling component |
| CVE-2026-110005 | await | — | Komodo | Komodo | — | Moghtech Komodo contains an OS command injection vulnerability |
| CVE-2026-110136 | await | — | Chrome | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110137 | await | — | Chrome | CWE-416 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a re… | |
| CVE-2026-110138 | await | — | Chrome | CWE-416 | Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allo… | |
| CVE-2026-110139 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110140 | await | — | Chrome | CWE-843 | Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote… | |
| CVE-2026-110141 | await | — | Chrome | CWE-203 | Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allow… | |
| CVE-2026-110142 | await | — | Chrome | CWE-416 | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed … | |
| CVE-2026-110143 | await | — | Chrome | CWE-457 | Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior t… | |
| CVE-2026-110144 | await | — | Chrome | CWE-863 | Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0… | |
| CVE-2026-110145 | await | — | Chrome | CWE-416 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a… | |
| CVE-2026-110146 | await | — | Chrome | CWE-200 | Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed… | |
| CVE-2026-110147 | await | — | Chrome | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110148 | await | — | Chrome | CWE-416 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110149 | await | — | Chrome | CWE-416 | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a r… | |
| CVE-2026-110150 | await | — | Chrome | CWE-250 | Privilege elevation in Installer in Google Chrome on on Windows prior to 155.… | |
| CVE-2026-110151 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110152 | await | — | Chrome | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.7… | |
| CVE-2026-110153 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110154 | await | — | Chrome | CWE-416 | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a re… | |
| CVE-2026-110155 | await | — | Chrome | CWE-122 | Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a r… | |
| CVE-2026-110156 | await | — | Chrome | CWE-706 | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior… | |
| CVE-2026-110157 | await | — | Chrome | CWE-416 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110158 | await | — | Chrome | CWE-416 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a… | |
| CVE-2026-110159 | await | — | Chrome | CWE-863 | Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 al… | |
| CVE-2026-110160 | await | — | Chrome | CWE-862 | Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 … | |
| CVE-2026-110161 | await | — | Chrome | CWE-416 | Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a r… | |
| CVE-2026-110162 | await | — | Chrome | CWE-416 | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a r… | |
| CVE-2026-110163 | await | — | Chrome | CWE-416 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110164 | await | — | Chrome | CWE-416 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remot… | |
| CVE-2026-110165 | await | — | Chrome | CWE-416 | Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 … | |
| CVE-2026-110166 | await | — | Chrome | CWE-122 | Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed … | |
| CVE-2026-110167 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110168 | await | — | Chrome | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote… | |
| CVE-2026-110169 | await | — | Chrome | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote… | |
| CVE-2026-110170 | await | — | Chrome | CWE-416 | Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a … | |
| CVE-2026-110171 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110172 | await | — | Chrome | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a rem… | |
| CVE-2026-110247 | await | — | Mozilla | Thunderbird | — | Integer overflow in libmime buffer growth could lead to heap corruption |
| CVE-2026-110249 | await | — | Mozilla | Thunderbird | — | Denial-of-service in the Exchange email component |
