Mittel 6.7Windows
Mittel 6.7Windows
Windows Kernel Elevation of Privilege Vulnerability
Mittel 6.5Linux-Server
Podman: Schwachstelle ermöglicht Denial of Service
podman: Untrusted image labels allow auto-update to restart arbitrary systemd units
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Mitigation bypass in the SVG component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Information disclosure in the Layout component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape in the Agent component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape in the Graphics: WebGPU component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Uninitialized memory in the Graphics: WebGPU component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: Clickjacking issue in the Autofill component in Firefox for Android
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape in the Console component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Graphics component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Information disclosure in the Address Bar component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Information disclosure in the Layout: Form Controls component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the WebRTC component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Site isolation issue in the DOM: Navigation component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Site isolation issue in the Networking component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Spoofing issue in the DOM: Security component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Mitigation bypass in the WebExtensions component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Information disclosure in the Private Browsing component
Mittel 6.6Linux-Server
cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option
Mittel 4.8Linux-Server
keycloak-services: keycloak-services: Login-failure upsert trusts MySQL/MariaDB affected-row count
Mittel 5.3Linux-Server
rack: rack: Security header bypass via unnormalized dot segments in request paths
## Summary `Rack::Static` normalizes the request path with `Utils.clean_path_info` when deciding which file to serve, but matches `header_rules` against a path that is only URL-decoded. A request containing dot segments, raw or percent-encoded, is served the normalized target file while the header rules for that file's location are not applied. This allows an attacker to receive a protected static file without the security headers configured for it. ## Details…