{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Firefox versions ant\u00e9rieures \u00e0 144",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Thunderbird versions ant\u00e9rieures \u00e0 144",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.29",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.4",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Thunderbird versions ant\u00e9rieures \u00e0 140.4",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-11712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11712"
    },
    {
      "name": "CVE-2025-11710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11710"
    },
    {
      "name": "CVE-2025-11717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11717"
    },
    {
      "name": "CVE-2025-11714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11714"
    },
    {
      "name": "CVE-2025-11709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11709"
    },
    {
      "name": "CVE-2025-11708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11708"
    },
    {
      "name": "CVE-2025-11720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11720"
    },
    {
      "name": "CVE-2025-11721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11721"
    },
    {
      "name": "CVE-2025-11716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11716"
    },
    {
      "name": "CVE-2025-11711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11711"
    },
    {
      "name": "CVE-2025-11718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11718"
    },
    {
      "name": "CVE-2025-11715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11715"
    },
    {
      "name": "CVE-2025-11713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11713"
    },
    {
      "name": "CVE-2025-11719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11719"
    }
  ],
  "initial_release_date": "2025-10-15T00:00:00",
  "last_revision_date": "2025-10-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0873",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-81",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-85",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-85/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-82",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-82/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-83",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-84",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-84/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Firefox versions ant\u00e9rieures \u00e0 144",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Thunderbird versions ant\u00e9rieures \u00e0 144",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.29",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.4",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Thunderbird versions ant\u00e9rieures \u00e0 140.4",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-11712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11712"
    },
    {
      "name": "CVE-2025-11710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11710"
    },
    {
      "name": "CVE-2025-11717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11717"
    },
    {
      "name": "CVE-2025-11714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11714"
    },
    {
      "name": "CVE-2025-11709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11709"
    },
    {
      "name": "CVE-2025-11708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11708"
    },
    {
      "name": "CVE-2025-11720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11720"
    },
    {
      "name": "CVE-2025-11721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11721"
    },
    {
      "name": "CVE-2025-11716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11716"
    },
    {
      "name": "CVE-2025-11711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11711"
    },
    {
      "name": "CVE-2025-11718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11718"
    },
    {
      "name": "CVE-2025-11715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11715"
    },
    {
      "name": "CVE-2025-11713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11713"
    },
    {
      "name": "CVE-2025-11719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11719"
    }
  ],
  "initial_release_date": "2025-10-15T00:00:00",
  "last_revision_date": "2025-10-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0873",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-81",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-85",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-85/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-82",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-82/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-83",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-84",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-84/"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-11719",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-11719"
    }
  },
  "description": "Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u652f\u6301IMAP\u3001POP\u90ae\u4ef6\u534f\u8bae\u4ee5\u53caHTML\u90ae\u4ef6\u683c\u5f0f\u3002 \n\nMozilla Firefox\u548cMozilla Thunderbird\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6d4f\u89c8\u5668\u5d29\u6e83\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1991950",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-24620",
  "openTime": "2025-10-23",
  "patchDescription": "Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u652f\u6301IMAP\u3001POP\u90ae\u4ef6\u534f\u8bae\u4ee5\u53caHTML\u90ae\u4ef6\u683c\u5f0f\u3002 \r\n\r\nMozilla Firefox\u548cMozilla Thunderbird\u5b58\u5728\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6d4f\u89c8\u5668\u5d29\u6e83\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mozilla Firefox\u548cMozilla Thunderbird\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mozilla Firefox \u003c144",
      "Mozilla Thunderbird \u003c144"
    ]
  },
  "referenceLink": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991950",
  "serverity": "\u9ad8",
  "submitTime": "2025-10-17",
  "title": "Mozilla Firefox\u548cMozilla Thunderbird\u5185\u5b58\u9519\u8bef\u5f15\u7528\u6f0f\u6d1e"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "144",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "144",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "source": "security@mozilla.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B82B1C7-1B0F-45B7-8234-D85DDEB63886",
              "versionEndExcluding": "144.0",
              "versionStartIncluding": "143.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "08E54DCC-0AA4-47DE-9DF2-C4135B0D433D",
              "versionEndExcluding": "144.0",
              "versionStartIncluding": "143.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144."
    }
  ],
  "id": "CVE-2025-11719",
  "lastModified": "2026-06-17T08:31:03.547",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-11719",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-10-15T13:20:54.247038Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-10-14T13:15:38.287",
  "references": [
    {
      "source": "security@mozilla.org",
      "tags": [
        "Issue Tracking",
        "Permissions Required"
      ],
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991950"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
    }
  ],
  "sourceIdentifier": "security@mozilla.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-11719"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-10-14T13:15:38Z",
    "severity": "CRITICAL"
  },
  "details": "Starting in Firefox 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability affects Firefox \u003c 144 and Thunderbird \u003c 144.",
  "id": "GHSA-wvmm-cxmc-39xj",
  "modified": "2025-10-15T15:30:27Z",
  "published": "2025-10-14T15:31:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11719"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991950"
    },
    {
      "type": "WEB",
      "url": "https://www.mozilla.org/security/advisories/mfsa2025-81"
    },
    {
      "type": "WEB",
      "url": "https://www.mozilla.org/security/advisories/mfsa2025-84"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Mozilla heeft kwetsbaarheden verholpen in Firefox en Thunderbird (Specifiek voor versies onder 144).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten verschillende problemen, waaronder een use-after-free probleem, geheugenveiligheidsfouten en de mogelijkheid voor een kwaadwillende om gevoelige gegevens te benaderen of willekeurige code uit te voeren. Deze kwetsbaarheden kunnen worden ge\u00ebxploiteerd via gemanipuleerde webprocessen, onveilige IPC-berichten en andere methoden die de integriteit van de applicaties in gevaar brengen. De risico\u0027s zijn significant, vooral voor gebruikers van Windows en Android, waar specifieke kwetsbaarheden zijn vastgesteld die kunnen leiden tot ongeautoriseerde toegang en systeemcompromittering.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Mozilla heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
        "title": "CWE-88"
      },
      {
        "category": "general",
        "text": "Improper Encoding or Escaping of Output",
        "title": "CWE-116"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Interpretation Conflict",
        "title": "CWE-436"
      },
      {
        "category": "general",
        "text": "User Interface (UI) Misrepresentation of Critical Information",
        "title": "CWE-451"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive System Information to an Unauthorized Control Sphere",
        "title": "CWE-497"
      },
      {
        "category": "general",
        "text": "Sensitive Data Storage in Improperly Locked Memory",
        "title": "CWE-591"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Rendered UI Layers or Frames",
        "title": "CWE-1021"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-82/"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-84/"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-85/"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird",
    "tracking": {
      "current_release_date": "2025-10-20T12:59:06.729067Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2025-0325",
      "initial_release_date": "2025-10-20T12:59:06.729067Z",
      "revision_history": [
        {
          "date": "2025-10-20T12:59:06.729067Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Firefox"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Firefox ESR"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Thunderbird"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Thunderbird ESR"
          }
        ],
        "category": "vendor",
        "name": "Mozilla"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11708",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free vulnerability in MediaTrackGraphImpl::GetInstance() affects Firefox and Thunderbird versions below 144, with specific ESR versions also impacted, as assessed by Red Hat Product Security.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11708 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11708.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11708"
    },
    {
      "cve": "CVE-2025-11709",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "A vulnerability in specific versions of Firefox and Thunderbird allows exploitation through manipulated WebGL textures, resulting in out of bounds reads and writes in a more privileged process.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11709 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11709.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11709"
    },
    {
      "cve": "CVE-2025-11710",
      "cwe": {
        "id": "CWE-497",
        "name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive System Information to an Unauthorized Control Sphere",
          "title": "CWE-497"
        },
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "description",
          "text": "A vulnerability in Firefox and Thunderbird prior to specified updates allows a compromised web process to access sensitive memory blocks of the privileged browser process via malicious IPC messages.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11710 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11710.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11710"
    },
    {
      "cve": "CVE-2025-11711",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        },
        {
          "category": "description",
          "text": "A vulnerability affecting specific versions of Firefox and Thunderbird allows modification of non-writeable JavaScript Object properties, as assessed by Red Hat Product Security based on a Mozilla Foundation Security Advisory.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11711.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11711"
    },
    {
      "cve": "CVE-2025-11712",
      "cwe": {
        "id": "CWE-436",
        "name": "Interpretation Conflict"
      },
      "notes": [
        {
          "category": "other",
          "text": "Interpretation Conflict",
          "title": "CWE-436"
        },
        {
          "category": "other",
          "text": "Improper Encoding or Escaping of Output",
          "title": "CWE-116"
        },
        {
          "category": "description",
          "text": "A vulnerability in Firefox and Thunderbird allows exploitation of the OBJECT tag\u0027s type attribute, potentially leading to XSS attacks on sites serving files without a content-type header.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11712 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11712.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11712"
    },
    {
      "cve": "CVE-2025-11713",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
          "title": "CWE-88"
        },
        {
          "category": "other",
          "text": "Improper Encoding or Escaping of Output",
          "title": "CWE-116"
        },
        {
          "category": "description",
          "text": "A vulnerability in the \u0027Copy as cURL\u0027 feature affects Windows users of Firefox and Thunderbird, allowing unexpected code execution, while other operating systems remain unaffected.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11713 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11713.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11713"
    },
    {
      "cve": "CVE-2025-11714",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "description",
          "text": "Memory safety vulnerabilities in various versions of Firefox and Thunderbird could be exploited to execute arbitrary code, with severity ratings provided by Red Hat based on Mozilla\u0027s advisory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11714 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11714.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11714"
    },
    {
      "cve": "CVE-2025-11715",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "description",
          "text": "Memory safety vulnerabilities in Firefox and Thunderbird versions 140.3 and 143 could allow arbitrary code execution, affecting earlier versions and rated by Red Hat based on Mozilla\u0027s advisory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11715 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11715.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11715"
    },
    {
      "cve": "CVE-2025-11716",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "description",
          "text": "A vulnerability in Firefox and Thunderbird versions prior to 144 allows links in a sandboxed iframe to open external applications on Android without the necessary \u0027allow-\u0027 permission.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11716 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11716.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11716"
    },
    {
      "cve": "CVE-2025-11717",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "description",
          "text": "Firefox versions prior to 144 exhibit a black screen in the app switcher instead of displaying the password edit screen when the last used screen was password-related on Android devices.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11717 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11717.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11717"
    },
    {
      "cve": "CVE-2025-11718",
      "cwe": {
        "id": "CWE-451",
        "name": "User Interface (UI) Misrepresentation of Critical Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "User Interface (UI) Misrepresentation of Critical Information",
          "title": "CWE-451"
        },
        {
          "category": "description",
          "text": "A vulnerability in Firefox versions prior to 144 on Android allows malicious pages to create a deceptive fake address bar by hiding the real one during scrolling, potentially misleading users.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11718 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11718.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11718"
    },
    {
      "cve": "CVE-2025-11719",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "Firefox and Thunderbird versions prior to 144 are vulnerable to crashes on Windows due to a use-after-free memory corruption issue in the native messaging API for web extensions, identified from version 143.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11719 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11719.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11719"
    },
    {
      "cve": "CVE-2025-11720",
      "cwe": {
        "id": "CWE-451",
        "name": "User Interface (UI) Misrepresentation of Critical Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "User Interface (UI) Misrepresentation of Critical Information",
          "title": "CWE-451"
        },
        {
          "category": "description",
          "text": "The Firefox and Firefox Focus UI for Android custom tabs displayed only the loaded site instead of the full hostname, misleading users about content sources from subdomains in versions prior to 144.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11720 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11720.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11720"
    },
    {
      "cve": "CVE-2025-11721",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "description",
          "text": "A memory safety vulnerability in Firefox 143 and Thunderbird 143 could lead to arbitrary code execution due to memory corruption, affecting versions prior to 144.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-11721 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-11721.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-11721"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "MozillaFirefox-144.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the MozillaFirefox-144.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15645",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15645-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11708 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11708/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11709 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11710 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11710/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11711 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11712 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11712/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11713 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11714 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11715 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11716 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11716/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11717 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11718 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11719 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11719/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11720 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11720/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11721 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11721/"
      }
    ],
    "title": "MozillaFirefox-144.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-10-18T00:00:00Z",
      "generator": {
        "date": "2025-10-18T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15645-1",
      "initial_release_date": "2025-10-18T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-10-18T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-144.0-1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-144.0-1.1.aarch64",
                  "product_id": "MozillaFirefox-144.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
                  "product_id": "MozillaFirefox-branding-upstream-144.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-144.0-1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-devel-144.0-1.1.aarch64",
                  "product_id": "MozillaFirefox-devel-144.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-144.0-1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-common-144.0-1.1.aarch64",
                  "product_id": "MozillaFirefox-translations-common-144.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-144.0-1.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-other-144.0-1.1.aarch64",
                  "product_id": "MozillaFirefox-translations-other-144.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-144.0-1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-144.0-1.1.ppc64le",
                  "product_id": "MozillaFirefox-144.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
                  "product_id": "MozillaFirefox-branding-upstream-144.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-144.0-1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-devel-144.0-1.1.ppc64le",
                  "product_id": "MozillaFirefox-devel-144.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-144.0-1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-common-144.0-1.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-common-144.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-144.0-1.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-other-144.0-1.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-other-144.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-144.0-1.1.s390x",
                "product": {
                  "name": "MozillaFirefox-144.0-1.1.s390x",
                  "product_id": "MozillaFirefox-144.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-144.0-1.1.s390x",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-144.0-1.1.s390x",
                  "product_id": "MozillaFirefox-branding-upstream-144.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-144.0-1.1.s390x",
                "product": {
                  "name": "MozillaFirefox-devel-144.0-1.1.s390x",
                  "product_id": "MozillaFirefox-devel-144.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-144.0-1.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-common-144.0-1.1.s390x",
                  "product_id": "MozillaFirefox-translations-common-144.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-144.0-1.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-other-144.0-1.1.s390x",
                  "product_id": "MozillaFirefox-translations-other-144.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-144.0-1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-144.0-1.1.x86_64",
                  "product_id": "MozillaFirefox-144.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
                  "product_id": "MozillaFirefox-branding-upstream-144.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-144.0-1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-devel-144.0-1.1.x86_64",
                  "product_id": "MozillaFirefox-devel-144.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-144.0-1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-common-144.0-1.1.x86_64",
                  "product_id": "MozillaFirefox-translations-common-144.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-144.0-1.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-other-144.0-1.1.x86_64",
                  "product_id": "MozillaFirefox-translations-other-144.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-144.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-144.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-144.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-144.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-144.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x"
        },
        "product_reference": "MozillaFirefox-144.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-144.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-144.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-144.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-144.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-144.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x"
        },
        "product_reference": "MozillaFirefox-branding-upstream-144.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-upstream-144.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-144.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-devel-144.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-144.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-devel-144.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-144.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x"
        },
        "product_reference": "MozillaFirefox-devel-144.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-144.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-devel-144.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-144.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-common-144.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-144.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-common-144.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-144.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-common-144.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-144.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-common-144.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-144.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-other-144.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-144.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-other-144.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-144.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-other-144.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-other-144.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-other-144.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11708",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11708"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free in MediaTrackGraphImpl::GetInstance() This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11708",
          "url": "https://www.suse.com/security/cve/CVE-2025-11708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11708",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11708"
    },
    {
      "cve": "CVE-2025-11709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 115.29, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11709",
          "url": "https://www.suse.com/security/cve/CVE-2025-11709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11709",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11709"
    },
    {
      "cve": "CVE-2025-11710",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11710"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 115.29, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11710",
          "url": "https://www.suse.com/security/cve/CVE-2025-11710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11710",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11710"
    },
    {
      "cve": "CVE-2025-11711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 115.29, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11711",
          "url": "https://www.suse.com/security/cve/CVE-2025-11711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11711",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11711"
    },
    {
      "cve": "CVE-2025-11712",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11712"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11712",
          "url": "https://www.suse.com/security/cve/CVE-2025-11712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11712",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11712"
    },
    {
      "cve": "CVE-2025-11713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient escaping in the \"Copy as cURL\" feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11713",
          "url": "https://www.suse.com/security/cve/CVE-2025-11713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11713",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11713"
    },
    {
      "cve": "CVE-2025-11714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 115.29, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11714",
          "url": "https://www.suse.com/security/cve/CVE-2025-11714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11714",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11714"
    },
    {
      "cve": "CVE-2025-11715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 144, Firefox ESR \u003c 140.4, Thunderbird \u003c 144, and Thunderbird \u003c 140.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11715",
          "url": "https://www.suse.com/security/cve/CVE-2025-11715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11715",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11715"
    },
    {
      "cve": "CVE-2025-11716",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11716"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Links in a sandboxed iframe could open an external app on Android without the required \"allow-\" permission. This vulnerability affects Firefox \u003c 144 and Thunderbird \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11716",
          "url": "https://www.suse.com/security/cve/CVE-2025-11716"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11716",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11716"
    },
    {
      "cve": "CVE-2025-11717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability affects Firefox \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11717",
          "url": "https://www.suse.com/security/cve/CVE-2025-11717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11717",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11717"
    },
    {
      "cve": "CVE-2025-11718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event This vulnerability affects Firefox \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11718",
          "url": "https://www.suse.com/security/cve/CVE-2025-11718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11718",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11718"
    },
    {
      "cve": "CVE-2025-11719",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11719"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability affects Firefox \u003c 144 and Thunderbird \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11719",
          "url": "https://www.suse.com/security/cve/CVE-2025-11719"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11719",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11719"
    },
    {
      "cve": "CVE-2025-11720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Firefox and Firefox Focus UI for the Android custom tab feature only showed the \"site\" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability affects Firefox \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11720",
          "url": "https://www.suse.com/security/cve/CVE-2025-11720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11720",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11720"
    },
    {
      "cve": "CVE-2025-11721",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11721"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 144 and Thunderbird \u003c 144.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
          "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11721",
          "url": "https://www.suse.com/security/cve/CVE-2025-11721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251263 for CVE-2025-11721",
          "url": "https://bugzilla.suse.com/1251263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1.x86_64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.aarch64",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.ppc64le",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.s390x",
            "openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2025-11721"
    }
  ]
}