CVE-2026-118025 | Mozilla Firefox up to 158 SVG Remote Code Execution
A vulnerability described as critical has been identified in Mozilla Firefox up to 158. The impacted element is an unknown
Read MoreSecurity
03
CVE-2026-118026 | Mozilla Firefox up to 158 GC memory corruption
A vulnerability classified as critical has been found in Mozilla Firefox up to 158. This affects an unknown function of
Read MoreCVE-2026-118018 | Mozilla Firefox up to 158 Downloads information disclosure
A vulnerability classified as problematic was found in Mozilla Firefox up to 158. This impacts an unknown function of the
Read MoreCVE-2026-118027 | Mozilla Firefox up to 115.43 Layout code injection
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 115.43. Affected is an unknown
Read MoreCVE-2026-34157 | wailsapp Wails Origin Validator originValidator.go wildcardPatternToRegex permissive regular expression (ID 5074)
A vulnerability, which was classified as critical, was found in wailsapp Wails. Affected by this vulnerability is the function wildcardPatternToRegex
Read MoreCVE-2026-48705 | MONAI MONAILabel 0.9.7/3.0.2 PydicomReader writer.py PydicomReader._get_affine input validation
A vulnerability has been found in MONAI MONAILabel 0.9.7/3.0.2 and classified as critical. Affected by this issue is the function
Read MoreCVE-2026-33944 | Dolibarr 23.0.0 Third Party societe.class.php localtax1_value/localtax2_value sql injection
A vulnerability was found in Dolibarr 23.0.0 and classified as critical. This affects an unknown part of the file societe/class/societe.class.php
Read MoreCVE-2026-46350 | dcmjs up to 0.51.x DecimalString/IntegerString ValueRepresentation.js Number input validation
A vulnerability was found in dcmjs up to 0.51.x. It has been classified as critical. This vulnerability affects the function
Read MoreCVE-2026-49272 | OAuthLib Device Code Grant device_code.py DeviceCodeGrant.validate_token_request device_code input validation
A vulnerability was found in OAuthLib. It has been declared as critical. This issue affects the function DeviceCodeGrant.validate_token_request of the
Read More
SkyW4lker Exposed: A Growing Microsoft 365 Phishing Threat to American Enterprises
SkyW4lker (SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users in the United States, Europe, and
Read More