NVD disclosure day
CVE-2026-4729
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety flaws in Firefox and Thunderbird could allow attackers to run arbitrary code. If reachable, this could impact system stability and lead to unauthorized actions. Determining exposure and relevance is key to managing this risk.
CVE-2026-4721
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety bugs in Firefox and Thunderbird could allow attackers to execute arbitrary code. While exploitation is uncertain, these vulnerabilities pose a critical risk to affected software integrity.
CVE-2026-4720
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Memory safety flaws in Firefox and Thunderbird could allow arbitrary code execution if reachable by an attacker. This issue is critical due to the potential for unauthorized code execution.
CVE-2026-4700
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A mitigation bypass vulnerability exists in the Networking: HTTP component of affected software, potentially allowing unauthorized access. This could enable attackers to bypass security measures, leading to data compromise or system access if reachable. Prompt assessment of affected software deployment is necessary to
CVE-2026-4698
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the JavaScript engine of Mozilla's Firefox browser that could allow an attacker to execute arbitrary code. This issue requires user interaction, such as visiting a malicious website, to be exploited. It is important to confirm the relevance and exposure of this vulnerability to unders
CVE-2026-4696
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the text and font handling component of Mozilla Firefox, which could allow an attacker to execute arbitrary code. This issue requires user interaction with malicious content and poses a risk to system integrity and data confidentiality. Updates are available for affected version
CVE-2026-4692
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A sandbox escape vulnerability in the Responsive Design Mode component of Firefox and Thunderbird could allow an attacker to break out of restricted environments. This could potentially affect system data and application behavior if triggered by user interaction with malicious content. Further analysis is needed to con
CVE-2026-4691
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the CSS Parsing and Computation component of Firefox and Thunderbird. If reachable, an attacker could exploit this by providing malicious web content, potentially leading to integrity and availability impacts or even code execution.
CVE-2026-4689
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in Mozilla's Firefox and Thunderbird products could allow for sandbox escape due to an integer overflow in the XPCOM component. If reachable, an attacker could exploit this to execute arbitrary code on a user's system, posing a significant risk to data and system integrity.
CVE-2026-4688
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical sandbox escape vulnerability exists in the Disability Access APIs component of certain Mozilla products. This flaw, a use-after-free condition, could allow an attacker to break out of the browser's security sandbox if reachable. It is important to identify and update affected systems to mitigate this risk.
CVE-2026-33211
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The Tekton Pipelines project, used for CI/CD in Kubernetes, has a path traversal vulnerability in its git resolver via the `pathInRepo` parameter. An authenticated user could exploit this to read arbitrary files, such as ServiceAccount tokens, from the resolver pod's filesystem. This could lead to unauthorized access a