Mozilla Thunderbird
1711 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-118180 | corrigé en 153.6, 159 | Matrix homeserver could redirect the chat session to a local file or network share | ||||
| CVE-2026-118179 | corrigé en 153.6, 159 | Request forgery via news: links | ||||
| CVE-2026-118178 | corrigé en 153.6, 159 | RSS feed could redirect its subscription to a local file or network share | ||||
| CVE-2026-118177 | corrigé en 153.6, 159 | Calendar discovery accepted local file and remote network share locations | ||||
| CVE-2026-118176 | corrigé en 153.6, 159 | Bypass of remote UNC path restriction in mailbox: URLs | ||||
| CVE-2026-118175 | corrigé en 153.6, 159 | Content of other messages could be included when replying to a crafted message | ||||
| CVE-2026-118174 | corrigé en 153.6, 159 | Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment | ||||
| CVE-2026-118026 | corrigé en 159 | Invalid pointer in the JavaScript: GC component | ||||
| CVE-2026-118025 | corrigé en 159 | Other issue in the SVG component | ||||
| CVE-2026-118024 | corrigé en 159 | Use-after-free in the Graphics: Text component | ||||
| CVE-2026-118023 | corrigé en 159 | Sandbox escape due to use-after-free in the Graphics: WebRender component | ||||
| CVE-2026-118022 | corrigé en 159 | Sandbox escape due to use-after-free in the Disability Access APIs component | ||||
| CVE-2026-118021 | corrigé en 159 | Sandbox escape due to use-after-free in the XPCOM component | ||||
| CVE-2026-118020 | corrigé en 159 | Use-after-free in the Layout component | ||||
| CVE-2026-118019 | corrigé en 159 | Race condition, use-after-free in the DOM: File component | ||||
| CVE-2026-118017 | corrigé en 159 | Use-after-free in the SVG component | ||||
| CVE-2026-118016 | corrigé en 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-118015 | corrigé en 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-118014 | corrigé en 159 | Use-after-free in the JavaScript Engine: JIT component | ||||
| CVE-2026-118013 | corrigé en 159 | Use-after-free in the Layout: Images, Video, and HTML Frames component | ||||
| CVE-2026-118012 | corrigé en 159 | Use-after-free in the DOM: Animation component | ||||
| CVE-2026-118011 | corrigé en 159 | Frame poisoning in the CSS Parsing and Computation component | ||||
| CVE-2026-118010 | corrigé en 159 | Use-after-free in the Disability Access APIs component | ||||
| CVE-2026-118009 | corrigé en 159 | Integer overflow, use-after-free in the Graphics: Text component | ||||
| CVE-2026-118008 | corrigé en 159 | Privilege escalation in the DOM: Navigation component | HIGH 8.8 | |||
| CVE-2026-118007 | corrigé en 159 | Use-after-free in the JavaScript: GC component | ||||
| CVE-2026-118006 | corrigé en 159 | Privilege escalation due to use-after-free in the WebRTC: Signaling component | ||||
| CVE-2026-118005 | corrigé en 159 | Use-after-free in the WebRTC: Signaling component | ||||
| CVE-2026-118004 | corrigé en 153.6, 159 | Incorrect boundary conditions in the CSS Transitions and Animations component | ||||
| CVE-2026-118003 | corrigé en 153.6, 159 | Information disclosure in the Networking: DNS component | ||||
| CVE-2026-118002 | corrigé en 153.6, 159 | Information disclosure due to race condition in the Networking component | ||||
| CVE-2026-118000 | corrigé en 153.6, 159 | Information disclosure in the Networking: HTTP component | ||||
| CVE-2026-117999 | corrigé en 153.6, 159 | Race condition in the IPC component | ||||
| CVE-2026-117998 | corrigé en 153.6, 159 | Mitigation bypass in the DOM: Push Subscriptions component | ||||
| CVE-2026-117997 | corrigé en 153.6, 159 | Sandbox escape due to use-after-free in the Widget component | ||||
| CVE-2026-117996 | corrigé en 153.6, 159 | Incorrect boundary conditions in the WebRTC component | ||||
| CVE-2026-117995 | corrigé en 153.6, 159 | Privilege escalation in the DOM: UI Events & Focus Handling component | ||||
| CVE-2026-117994 | corrigé en 153.6, 159 | Use-after-free in the JavaScript: GC component | ||||
| CVE-2026-117993 | corrigé en 153.6, 159 | Integer overflow in the Graphics: Text component | ||||
| CVE-2026-117992 | corrigé en 153.6, 159 | Information disclosure in the CSS Parsing and Computation component | ||||
| CVE-2026-117991 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Text and Fonts component | ||||
| CVE-2026-117990 | corrigé en 153.6, 159 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | ||||
| CVE-2026-117989 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117988 | corrigé en 153.6, 159 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | ||||
| CVE-2026-117987 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117986 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117985 | corrigé en 153.6, 159 | Sandbox escape due to use-after-free in the Graphics component | ||||
| CVE-2026-117984 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Scrolling and Overflow component | ||||
| CVE-2026-117983 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117982 | corrigé en 153.6, 159 | Invalid pointer in the JavaScript Engine: JIT component | ||||
| CVE-2026-117981 | corrigé en 153.6, 159 | Privilege escalation in the Toolkit component | ||||
| CVE-2026-117980 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117979 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Graphics: WebRender component | ||||
| CVE-2026-117978 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Graphics component | ||||
| CVE-2026-117977 | corrigé en 153.6, 159 | Other issue in the Console component | ||||
| CVE-2026-117976 | corrigé en 153.6, 159 | Site isolation issue in the DOM: Navigation component | ||||
| CVE-2026-117975 | corrigé en 153.6, 159 | Sandbox escape due to invalid pointer in the Graphics: WebRender component | ||||
| CVE-2026-117974 | corrigé en 153.6, 159 | Use-after-free in the XML component | ||||
| CVE-2026-117973 | corrigé en 153.6, 159 | Use-after-free in the Networking: DNS component | ||||
| CVE-2026-117972 | corrigé en 153.6, 159 | Use-after-free in the Graphics component | ||||
| CVE-2026-117971 | corrigé en 153.6, 159 | Sandbox escape due to use-after-free in the Print Preview component | ||||
| CVE-2026-117970 | corrigé en 153.6, 159 | Race condition in the Disability Access APIs component | ||||
| CVE-2026-117969 | corrigé en 153.6, 159 | Invalid pointer in the JavaScript Engine: JIT component | ||||
| CVE-2026-117968 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117967 | corrigé en 153.6, 159 | Mitigation bypass in the DOM: Security component | ||||
| CVE-2026-117966 | corrigé en 153.6, 159 | Site isolation issue in the Networking: HTTP component | ||||
| CVE-2026-117965 | corrigé en 153.6, 159 | Same-origin policy bypass in the Address Bar component | ||||
| CVE-2026-117964 | corrigé en 153.6, 159 | Use-after-free in the Panning and Zooming component | ||||
| CVE-2026-117963 | corrigé en 153.6, 159 | Incorrect boundary conditions in the DOM: Service Workers component | ||||
| CVE-2026-117962 | corrigé en 153.6, 159 | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component | ||||
| CVE-2026-117961 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Text and Fonts component | ||||
| CVE-2026-117960 | corrigé en 153.6, 159 | Spoofing issue in the DOM: Core & HTML component | ||||
| CVE-2026-117959 | corrigé en 153.6, 159 | Site isolation issue in the DOM: Service Workers component | ||||
| CVE-2026-117958 | corrigé en 153.6, 159 | Site isolation issue in the Networking: HTTP component | ||||
| CVE-2026-117957 | corrigé en 153.6, 159 | Cryptographic issue in the WebRTC: Networking component | ||||
| CVE-2026-117956 | corrigé en 153.6, 159 | Invalid pointer in the Nimbus Desktop Client component | ||||
| CVE-2026-117955 | corrigé en 153.6, 159 | JIT miscompilation in the JavaScript: WebAssembly component | ||||
| CVE-2026-117954 | corrigé en 153.6, 159 | Use-after-free in the Layout: Positioned component | ||||
| CVE-2026-117953 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117952 | corrigé en 153.6, 159 | Uninitialized memory in the Networking component | ||||
| CVE-2026-117951 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117950 | corrigé en 153.6, 159 | Incorrect boundary conditions in the DOM: Core & HTML component | ||||
| CVE-2026-117949 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117948 | corrigé en 153.6, 159 | Use-after-free in the SVG component | ||||
| CVE-2026-117947 | corrigé en 153.6, 159 | Use-after-free in the XML component | ||||
| CVE-2026-117946 | corrigé en 153.6, 159 | Incorrect boundary conditions in the JavaScript Engine component | ||||
| CVE-2026-117945 | corrigé en 153.6, 159 | Incorrect boundary conditions in the XML component | ||||
| CVE-2026-117944 | corrigé en 153.6, 159 | Use-after-free in the Layout component | ||||
| CVE-2026-117943 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117942 | corrigé en 153.6, 159 | Incorrect boundary conditions in the JavaScript Engine: JIT component | ||||
| CVE-2026-117941 | corrigé en 153.6, 159 | Use-after-free in the DOM: CSS Object Model component | ||||
| CVE-2026-117940 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117939 | corrigé en 153.6, 159 | Use-after-free in the XML component | ||||
| CVE-2026-117938 | corrigé en 153.6, 159 | Use-after-free in the Layout component | ||||
| CVE-2026-117937 | corrigé en 153.6, 159 | Invalid pointer in the JavaScript Engine component | ||||
| CVE-2026-117936 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117935 | corrigé en 153.6, 159 | Use-after-free in the DOM: Bindings (WebIDL) component | ||||
| CVE-2026-117934 | corrigé en 153.6, 159 | Use-after-free in the Layout component | ||||
| CVE-2026-117933 | corrigé en 153.6, 159 | Frame poisoning in the CSS Parsing and Computation component | ||||
| CVE-2026-117932 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117931 | corrigé en 153.6, 159 | Use-after-free in the DOM: Events component | ||||
| CVE-2026-117930 | corrigé en 153.6, 159 | Use-after-free in the DOM: Bindings (WebIDL) component | ||||
| CVE-2026-117929 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117928 | corrigé en 153.6, 159 | Same-origin policy bypass in the CSS Parsing and Computation component | ||||
| CVE-2026-117927 | corrigé en 153.6, 159 | Use-after-free in the SVG component | ||||
| CVE-2026-117926 | corrigé en 153.6, 159 | Incorrect boundary conditions in the SVG component | ||||
| CVE-2026-117925 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117924 | corrigé en 153.6, 159 | Use-after-free in the XSLT component | ||||
| CVE-2026-117923 | corrigé en 153.6, 159 | Use-after-free in the Audio/Video component | ||||
| CVE-2026-117922 | corrigé en 153.6, 159 | Use-after-free in the Networking: WebSockets component | ||||
| CVE-2026-117921 | corrigé en 153.6, 159 | Use-after-free in the CSS Parsing and Computation component | ||||
| CVE-2026-117920 | corrigé en 153.6, 159 | Use-after-free in the DOM: HTML Parser component | ||||
| CVE-2026-117919 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117918 | corrigé en 153.6, 159 | Use-after-free in the Graphics: Canvas2D component | ||||
| CVE-2026-117917 | corrigé en 153.6, 159 | Invalid pointer in the Graphics: WebRender component | ||||
| CVE-2026-117916 | corrigé en 153.6, 159 | Use-after-free in the XSLT component | ||||
| CVE-2026-117915 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Block and Inline component | ||||
| CVE-2026-117914 | corrigé en 153.6, 159 | Use-after-free in the SVG component | ||||
| CVE-2026-117913 | corrigé en 153.6, 159 | Use-after-free in the SVG component | ||||
| CVE-2026-117912 | corrigé en 153.6, 159 | Same-origin policy bypass in the CSS Parsing and Computation component | ||||
| CVE-2026-117911 | corrigé en 153.6, 159 | Use-after-free in the Audio/Video: Playback component | ||||
| CVE-2026-117910 | corrigé en 153.6, 159 | Invalid pointer in the JavaScript Engine component | ||||
| CVE-2026-117909 | corrigé en 153.6, 159 | Use-after-free in the JavaScript: GC component | ||||
| CVE-2026-117908 | corrigé en 153.6, 159 | Use-after-free in the Graphics: ImageLib component | ||||
| CVE-2026-117907 | corrigé en 153.6, 159 | Use-after-free in the Networking component | ||||
| CVE-2026-117906 | corrigé en 153.6, 159 | Use-after-free in the CSS Parsing and Computation component | ||||
| CVE-2026-117905 | corrigé en 153.6, 159 | Use-after-free in the Audio/Video: Playback component | ||||
| CVE-2026-117904 | corrigé en 153.6, 159 | Use-after-free in the JavaScript: GC component | ||||
| CVE-2026-117903 | corrigé en 153.6, 159 | Use-after-free in the Audio/Video component | ||||
| CVE-2026-117902 | corrigé en 153.6, 159 | Use-after-free in the Layout: Text and Fonts component | ||||
| CVE-2026-117901 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117900 | corrigé en 153.6, 159 | Use-after-free in the DOM: Editor component | ||||
| CVE-2026-117899 | corrigé en 153.6, 159 | Use-after-free in the Networking: HTTP component | ||||
| CVE-2026-117898 | corrigé en 153.6, 159 | Use-after-free in the JavaScript Engine: JIT component | ||||
| CVE-2026-117897 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Tables component | ||||
| CVE-2026-117896 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117895 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117894 | corrigé en 153.6, 159 | Incorrect boundary conditions in the WebRTC: Signaling component | ||||
| CVE-2026-117893 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Security: PSM component | ||||
| CVE-2026-117892 | corrigé en 153.6, 159 | Privilege escalation due to use-after-free in the WebRTC: Networking component | ||||
| CVE-2026-117891 | corrigé en 153.6, 159 | Use-after-free in the JavaScript Engine: JIT component | ||||
| CVE-2026-117890 | corrigé en 153.6, 159 | JIT miscompilation in the JavaScript Engine: JIT component | ||||
| CVE-2026-117889 | corrigé en 153.6, 159 | Incorrect boundary conditions in the JavaScript Engine component | ||||
| CVE-2026-117888 | corrigé en 153.6, 159 | Uninitialized memory in the Graphics: Canvas2D component | ||||
| CVE-2026-117887 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117886 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Graphics: Text component | ||||
| CVE-2026-117885 | corrigé en 153.6, 159 | Use-after-free in the Layout: Grid component | ||||
| CVE-2026-117884 | corrigé en 153.6, 159 | Use-after-free in the Networking component | ||||
| CVE-2026-117883 | corrigé en 153.6, 159 | Use-after-free in the DOM: HTML Parser component | ||||
| CVE-2026-117882 | corrigé en 153.6, 159 | Use-after-free in the Layout component | ||||
| CVE-2026-117881 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117880 | corrigé en 153.6, 159 | Use-after-free in the XML component | ||||
| CVE-2026-117879 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Layout: Tables component | ||||
| CVE-2026-117878 | corrigé en 153.6, 159 | Other issue, use-after-free in the Storage: IndexedDB component | ||||
| CVE-2026-117877 | corrigé en 153.6, 159 | Use-after-free in the Layout: Text and Fonts component | ||||
| CVE-2026-117876 | corrigé en 153.6, 159 | Use-after-free in the Layout: Text and Fonts component | ||||
| CVE-2026-117875 | corrigé en 153.6, 159 | Use-after-free in the Layout: Scrolling and Overflow component | ||||
| CVE-2026-117874 | corrigé en 153.6, 159 | Use-after-free in the Internationalization component | ||||
| CVE-2026-117873 | corrigé en 153.6, 159 | Incorrect boundary conditions in the Audio/Video: Playback component | ||||
| CVE-2026-117872 | corrigé en 153.6, 159 | Use-after-free in the JavaScript: Standard Library component | ||||
| CVE-2026-117871 | corrigé en 153.6, 159 | Invalid pointer in the Graphics component | ||||
| CVE-2026-117870 | corrigé en 153.6, 159 | Use-after-free in the JavaScript Engine component | ||||
| CVE-2026-117869 | corrigé en 153.6, 159 | Use-after-free in the DOM: Core & HTML component | ||||
| CVE-2026-117868 | corrigé en 153.6, 159 | Sandbox escape in the DOM: Networking component | ||||
| CVE-2026-117867 | corrigé en 153.6, 159 | Use-after-free in the Layout component | ||||
| CVE-2026-117866 | corrigé en 153.6, 159 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component | ||||
| CVE-2026-117865 | corrigé en 153.6, 159 | Use-after-free in the JavaScript: GC component | ||||
| CVE-2026-117864 | corrigé en 153.6, 159 | Sandbox escape in the Form Manager component | ||||
| CVE-2026-117863 | corrigé en 153.6, 159 | Information disclosure due to uninitialized memory in the Audio/Video component | ||||
| CVE-2026-117862 | corrigé en 153.6, 159 | Privilege escalation due to incorrect boundary conditions in the Networking component | ||||
| CVE-2026-117861 | corrigé en 153.6, 159 | Sandbox escape in the DOM: Navigation component | ||||
| CVE-2026-117860 | corrigé en 153.6, 159 | Same-origin policy bypass in the DOM: Navigation component | ||||
| CVE-2026-113869 | corrigé en 153.6, 158.0.1 | Use-after-free in S/MIME decryption during a security device password prompt | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-113868 | corrigé en 153.5.1, 158.0.1 | Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-113867 | corrigé en 153.5.1, 158.0.1 | Stanza injection in XMPP chat | 0.2 % | |||
| CVE-2026-113866 | corrigé en 153.5.1, 158.0.1 | Account password sent unencrypted during Exchange account setup | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-113401 | corrigé en 158.0.1 | Denial-of-service in the PDF Viewer component | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-113400 | corrigé en 158.0.1 | Uninitialized memory in the Audio/Video: cubeb component | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-113470 | corrigé en 153.5.1, 158.0.1 | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component | MEDIUM 5.4 | 0.5 % | ||
| CVE-2026-113399 | corrigé en 158.0.1 | Incorrect boundary conditions in the SVG component | 0.2 % | |||
| CVE-2026-110249 | corrigé en 153.5, 158 | Denial-of-service in the Exchange email component | HIGH 8.6 | 0.2 % | ||
| CVE-2026-110247 | corrigé en 153.6, 158 | Integer overflow in libmime buffer growth could lead to heap corruption | HIGH 8.4 | 0.2 % | ||
| CVE-2026-109783 | corrigé en 153.5 | Mitigation bypass in the File Handling component | HIGH 8.3 | 0.3 % | ||
| CVE-2026-109782 | corrigé en 153.5 | Mitigation bypass in the File Handling component | HIGH 8.3 | 0.3 % | ||
| CVE-2026-109781 | corrigé en 153.5, 158 | Denial-of-service in the Printing: Output component | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-109780 | corrigé en 158 | Mitigation bypass in the DOM: Core & HTML component | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-109779 | corrigé en 158 | Race condition in the Networking: DNS component | MEDIUM 4.2 | 0.1 % | ||
| CVE-2026-109778 | corrigé en 153.5, 158 | Privilege escalation in the WebExtensions component | HIGH 8.8 | 0.3 % | ||
| CVE-2026-109777 | corrigé en 153.5, 158 | Information disclosure in the Storage: IndexedDB component | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-109776 | corrigé en 153.5, 158 | Race condition in the XPCOM component | MEDIUM 4.2 | 0.1 % | ||
| CVE-2026-109775 | corrigé en 153.5, 158 | Denial-of-service in the WebRTC component | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-109774 | corrigé en 158 | Invalid pointer, undefined behavior in the DOM: Notifications component | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-109773 | corrigé en 158 | Denial-of-service in the Sync component | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-109772 | corrigé en 158 | Same-origin policy bypass in the DevTools component | CRITICAL 9.1 | 0.2 % | ||
| CVE-2026-109771 | corrigé en 158 | Information disclosure in the WebRTC: Networking component | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-109770 | corrigé en 153.5, 158 | Spoofing issue in the DOM: Web Serial component | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-109769 | corrigé en 158 | Information disclosure in the Networking: Cache component | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-109768 | corrigé en 158 | Denial-of-service in the Site Reports component | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-109767 | corrigé en 153.5, 158 | Information disclosure in the Networking component | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-109766 | corrigé en 153.5, 158 | Mitigation bypass in the Enterprise Policies component | HIGH 8.1 | 0.3 % |