unknown

CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1.

Description

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1.

Scores

Severity
unknown
CVSS v2
—
CVSS v3
—
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

unknown

CVE-2026-98713

CVE‑2026‑98713 exposed a flaw in the Linux kernel’s KVM arm64 implementation that incorrectly gated fine‑grained undefined (FGU) trap configuration on hardware support, potentially causing spurious warnings and improper TLBI handling. The fix removes the unnecessary gating, ensuring FGUs are always enabled and preventing mis‑directed trap handling. This matters for virtualized ARM workloads that rely on correct TLBI and trap behavior.

View analysis

unknown

CVE-2026-98718

This CVE addresses a flaw in the Linux kernel's KVM SEV migration path where cache maintenance was performed after clearing the SEV active flag, creating a window that could allow memory to be reclaimed without flushing caches. The vulnerability could lead to stale or corrupted data being written to memory during intra-host migration. It was fixed by ensuring cache flush occurs before clearing the SEV state.

View analysis

unknown

CVE-2026-98720

CVE-2026-98720 is a flaw in the Linux kernel’s KVM nested virtualization that can prevent the MSR bitmap from refreshing when eVMCS controls change, allowing a guest to read or write the host’s TPR. This can lead to privilege escalation or denial of service in nested VM environments. The issue was fixed in the latest kernel patches.

View analysis

unknown

CVE-2026-98748

This CVE addresses a use‑after‑free in the Linux kernel’s bcm7271 UART driver. The flaw occurs when a receive‑timeout interrupt fires after the port has been removed, causing a kernel crash. It matters because any system using the bcm7271 serial controller could be destabilized.

View analysis