CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.21)
In ModelScope 1.25.0, a vulnerability was found allowing attackers to execute arbitrary code via a crafted module specified in the configuration file dey_mini.yaml under the key ['nnet']['module'].
Memory safety bugs were present in Firefox ESR 115.35, Firefox ESR 140.10, and Firefox 150. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code with enough effort.
Memory safety bugs are present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption, which could potentially be exploited to run arbitrary code.
Memory safety bugs were present in Firefox 150. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code with enough effort. The vulnerability was fixed in Firefox 151 and Thunderbird 151.
The vulnerability allows privilege escalation in the WebRTC Audio/Video component. It was fixed in Firefox 151 and Thunderbird 151.
The vulnerability allows privilege escalation in the security component. It was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
Denial-of-service vulnerability due to an invalid pointer in the Audio/Video: Web Codecs component. This was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
A vulnerability in the Graphics: WebGPU component allows for information disclosure. It was fixed in Firefox 151 and Thunderbird 151.
A vulnerability in the IP Protection component allows for information disclosure. It was fixed in Firefox 151 and Thunderbird 151.
Vulnerability related to information disclosure in the DOM in the security component. Fixed in Firefox 151 and Thunderbird 151.
Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
A mitigation bypass vulnerability in the DOM security component. This was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Spoofing issue in WebExtensions, which was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8958 is a vulnerability related to information disclosure and sandbox escape in the Security: Process Sandboxing component. It has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
The vulnerability allows privilege escalation in the Enterprise Policies component. It was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
The vulnerability allows privilege escalation in the DOM: Workers component. It was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8954 involves incorrect boundary conditions and integer overflow in the Audio/Video component. This issue has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
The vulnerability allows privilege escalation in the Application Update component. It was fixed in Firefox 151 and Thunderbird 151.