netsurf-browser CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH netsurf-browser CVE published 2026-10-26

CVE-2026-116740

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consumers by supplying media lists ending in a comma. This vulnerability affects systems that process untrusted media queries, such as web browsers or media processing software. The vulnerability is caused by a flaw in the mq_parse_media_query() function that allows remote [truncated]