Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-14 18:52Z
2026-02-25
2026-02-25 12:00Z
INFO

mquire: Linux memory forensics without external dependencies

Trail of Bits·blog.trailofbits.com

Trail of Bits open-sourced mquire, a Linux memory forensics tool that eliminates the need for external debug symbols by extracting type information from BTF (BPF Type Format) and symbol addresses from Kallsyms directly within memory dumps. The tool provides SQL-based querying of kernel structures including processes, open files, memory mappings, and network connections, supporting kernel 4.18+ with BTF and 6.4+ with Kallsyms.

SRFOsTACTA0007OSLinuxTYPResearchTYPToolSTGDiscoverySTGCollection
78
Edit Score
2026-02-25
2026-02-25 03:16Z
HIGH

CVE-2026-27608 — Parseplatform Parse_dashboard: In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27608

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can access any other app's agent endpoint by changing the app ID in the URL. Read-only users are given the full master key instead of the read-only master key and can supply write permissions in the request body to perform wri CVSSv3.1 8.1 (HIGH) · EPSS 12th percentile

CWECWE 862VNDParseplatformVNDParseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-25
2026-02-25 03:16Z
CRIT

CVE-2026-27606 — Rollupjs Rollup: Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27606

Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker to control output filenames (e.g., via CLI named inputs, manual chunk aliases, or malicious plugins) and use traversal sequences (`../`) to overwrite files anywhere on the host files CVSSv3.1 9.8 (CRITICAL)

CWECWE 22VNDRollupjsVNDRollupTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 16:24Z
HIGH

CVE-2025-63409 — Gcomtw Gcom_epon_1ge_firmware: Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-63409

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials. CVSSv3.1 8.8 (HIGH) · EPSS 21th percentile

CWECWE 284VNDGcomtwTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2807 — Mozilla Firefox: Some of these bugs showed evidence of memory corruption and we presume that with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2807

Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2806 — Mozilla Firefox: Uninitialized memory in the Graphics: Text component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2806

Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.1 (CRITICAL)

CWECWE 908CWECWE 457VNDMozillaVNDUninitializedTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2805 — Mozilla Firefox: Invalid pointer in the DOM: Core & HTML component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2805

Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 824VNDMozillaVNDInvalidTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2800 — Mozilla Firefox: Spoofing issue in the WebAuthn component in Firefox for Android.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2800

Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 290VNDMozillaVNDSpoofingTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2799 — Mozilla Firefox: Use-after-free in the DOM: Core & HTML component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2799

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
HIGH

CVE-2026-2798 — Mozilla Firefox: Use-after-free in the DOM: Core & HTML component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2798

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 8.8 (HIGH)

CWECWE 416VNDMozillaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2797 — Mozilla Firefox: Use-after-free in the JavaScript: GC component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2797

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2796 — Mozilla Firefox: JIT miscompilation in the JavaScript: WebAssembly component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 843VNDMozillaVNDJitTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2795 — Mozilla Firefox: Use-after-free in the JavaScript: GC component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2795

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2793 — Mozilla Firefox: Some of these bugs showed evidence of memory corruption and we presume that with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2793

Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2792 — Mozilla Firefox: Some of these bugs showed evidence of memory corruption and we presume that with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2792

Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 787VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2791 — Mozilla Firefox: Mitigation bypass in the Networking: Cache component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2791

Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 288VNDMozillaVNDMitigationTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2790 — Mozilla Firefox: Same-origin policy bypass in the Networking: JAR component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2790

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 346VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2789 — Mozilla Firefox: Use-after-free in the Graphics: ImageLib component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2789

Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2788 — Mozilla Firefox: Incorrect boundary conditions in the Audio/Video: GMP component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2788

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2787 — Mozilla Firefox: Use-after-free in the DOM: Window and Location component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2787

Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2786 — Mozilla Firefox: Use-after-free in the JavaScript Engine component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2786

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 416VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2785 — Mozilla Firefox: Invalid pointer in the JavaScript Engine component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2785

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 824VNDMozillaVNDInvalidTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2784 — Mozilla Firefox: Mitigation bypass in the DOM: Security component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2784

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 288VNDMozillaVNDMitigationTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2782 — Mozilla Firefox: Privilege escalation in the Netmonitor component.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2782

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 269VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-24
2026-02-24 14:16Z
CRIT

CVE-2026-2781 — Mozilla Firefox: Integer overflow in the Libraries component in NSS.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2781

Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 190VNDMozillaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score