Improper Handling of Physical or Environmental Conditions

The product does not properly handle unexpected physical or environmental conditions that occur naturally or are artificially induced.

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-49325 - - Jul 21, 2026 May 29, 2026 4.1 MEDIUM· v4 4.6 MEDIUM· v3 N/A· v2 Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module (WCM) wiring harnes...Show more Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module (WCM) wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via a falling-edge voltage transition on a dedicated wire pair. The receiving ECU does not distinguish between an active shutdown pulse and an open-circuit / disconnected condition; interrupting the relevant wires leaves the motorcycle fully operable even though the WCM never validated the rider's PIN. Specific connector details have been withheld pending vendor remediation.Show less
CVE-2026-2760 1Mozilla 2Firefox Thunderbird Jul 15, 2026 Feb 24, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2759 1Mozilla 2Firefox Thunderbird Jul 15, 2026 Feb 24, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2757 1Mozilla 2Firefox Thunderbird Jul 15, 2026 Feb 24, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2025-52557 - - Jun 17, 2026 Jun 21, 2025 8.6 HIGH· v4 N/A· v3 N/A· v2 Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This issue has been patch...Show more Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This issue has been patched in version 0.81.Show less
CVE-2024-39355 - - Jun 17, 2026 Feb 12, 2025 5.7 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.