Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-74969 (GCVE-0-2026-74969)
Vulnerability from cvelistv5 – Published: 2026-08-18 12:23 – Updated: 2026-08-19 17:12
VLAI
EPSS
VEX
Title
Use-after-free in the Layout: Text and Fonts component
Summary
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-19 13:01 UTC
CWE
- CWE-416 - Use After Free
Assigner
References
8 references
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Mozilla | Firefox |
Unaffected:
115.39 , ≤ 115.*
(rpm)
Unaffected: 140.14 , ≤ 140.* (rpm) Unaffected: 153.1 , ≤ 153.* (rpm) Unaffected: 154 , ≤ * (rpm) |
guessed | |
| Mozilla | Thunderbird |
Unaffected:
140.14 , ≤ 140.*
(rpm)
Unaffected: 153.1 , ≤ 153.* (rpm) Unaffected: 154 , ≤ * (rpm) |
guessed |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-74969",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-19T13:01:42.434010Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T17:12:38.897Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "115.*",
"status": "unaffected",
"version": "115.39",
"versionType": "rpm"
},
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.14",
"versionType": "rpm"
},
{
"lessThanOrEqual": "153.*",
"status": "unaffected",
"version": "153.1",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "154",
"versionType": "rpm"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.14",
"versionType": "rpm"
},
{
"lessThanOrEqual": "153.*",
"status": "unaffected",
"version": "153.1",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "154",
"versionType": "rpm"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Hyeonjun Ahn"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1."
}
],
"value": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T18:55:17.308Z",
"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"shortName": "mozilla"
},
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056065"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-74/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-75/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-77/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-78/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-80/"
}
],
"title": "Use-after-free in the Layout: Text and Fonts component"
}
},
"cveMetadata": {
"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
"assignerShortName": "mozilla",
"cveId": "CVE-2026-74969",
"datePublished": "2026-08-18T12:23:33.155Z",
"dateReserved": "2026-08-17T11:58:42.345Z",
"dateUpdated": "2026-08-19T17:12:38.897Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-74969",
"date": "2026-09-08",
"epss": "0.00319",
"percentile": "0.24499"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-74969\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2026-08-18T13:17:34.317\",\"lastModified\":\"2026-08-19T17:21:12.120\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.\"}],\"affected\":[{\"source\":\"security@mozilla.org\",\"affectedData\":[{\"vendor\":\"Mozilla\",\"product\":\"Firefox\",\"versions\":[{\"version\":\"115.39\",\"lessThanOrEqual\":\"115.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"140.14\",\"lessThanOrEqual\":\"140.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"153.1\",\"lessThanOrEqual\":\"153.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"154\",\"lessThanOrEqual\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Mozilla\",\"product\":\"Thunderbird\",\"versions\":[{\"version\":\"140.14\",\"lessThanOrEqual\":\"140.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"153.1\",\"lessThanOrEqual\":\"153.*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"154\",\"lessThanOrEqual\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-19T13:01:42.434010Z\",\"id\":\"CVE-2026-74969\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"115.39.0\",\"matchCriteriaId\":\"FD8DBFC4-10A7-41E2-B754-71CC6FEEBB5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"116.0\",\"versionEndExcluding\":\"140.14.0\",\"matchCriteriaId\":\"502016C0-F897-4F18-BFC7-301B71D93E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"141.0\",\"versionEndExcluding\":\"153.1.0\",\"matchCriteriaId\":\"5D58C9D3-E300-408A-ABF2-6E2BB49AB921\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"140.14.0\",\"matchCriteriaId\":\"4E2EC2AA-23B2-45C9-8594-DF80A0D800A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"141.0\",\"versionEndExcluding\":\"153.1.0\",\"matchCriteriaId\":\"47206424-A249-46CE-9776-F45A49344204\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=2056065\",\"source\":\"security@mozilla.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-74/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-75/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-76/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-77/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-78/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-79/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2026-80/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-09-08T08:19:44+00:00",
"cve": "CVE-2026-74969",
"id": "CVE-2026-74969",
"initial_release_date": "2026-08-18T12:23:33.155000+00:00",
"product_status:fixed": "75",
"product_status:known_affected": "10",
"product_status:under_investigation": "6",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74969.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-09-02T11:42:22Z",
"cve": "CVE-2026-74969",
"id": "CVE-2026-74969",
"initial_release_date": "2026-08-21T00:38:24Z",
"product_status:first_fixed": "374",
"product_status:known_affected": "65",
"product_status:recommended": "133",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-74969",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-74969.json",
"version": "10"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-74969\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-19T13:01:42.434010Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-359\", \"description\": \"CWE-359 Exposure of Private Personal Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-19T13:01:14.854Z\"}}], \"cna\": {\"title\": \"Use-after-free in the Layout: Text and Fonts component\", \"credits\": [{\"lang\": \"en\", \"value\": \"Hyeonjun Ahn\"}], \"affected\": [{\"vendor\": \"Mozilla\", \"product\": \"Firefox\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"115.39\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"115.*\"}, {\"status\": \"unaffected\", \"version\": \"140.14\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"140.*\"}, {\"status\": \"unaffected\", \"version\": \"153.1\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"153.*\"}, {\"status\": \"unaffected\", \"version\": \"154\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"*\"}]}, {\"vendor\": \"Mozilla\", \"product\": \"Thunderbird\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"140.14\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"140.*\"}, {\"status\": \"unaffected\", \"version\": \"153.1\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"153.*\"}, {\"status\": \"unaffected\", \"version\": \"154\", \"versionType\": \"rpm\", \"lessThanOrEqual\": \"*\"}]}], \"references\": [{\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=2056065\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-74/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-75/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-76/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-77/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-78/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-79/\"}, {\"url\": \"https://www.mozilla.org/security/advisories/mfsa2026-80/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"shortName\": \"mozilla\", \"dateUpdated\": \"2026-08-18T18:55:17.308Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-74969\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-19T13:01:45.732Z\", \"dateReserved\": \"2026-08-17T11:58:42.345Z\", \"assignerOrgId\": \"f16b083a-5664-49f3-a51e-8d479e5ed7fe\", \"datePublished\": \"2026-08-18T12:23:33.155Z\", \"assignerShortName\": \"mozilla\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
alsa-2026:58897
Vulnerability from osv_almalinux
Published
2026-08-24 00:00
Modified
2026-08-26 06:50
Summary
Important: firefox security update
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
- firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)
- firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)
- firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)
- firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)
- firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)
- firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971)
- firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)
- firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)
- firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)
- firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)
- firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)
- firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)
- firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)
- firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)
- firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)
- firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)
- firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)
- firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)
- firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)
- firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)
- firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)
- firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)
- firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)
- firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)
- firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)
- firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944)
- firefox: Integer overflow in the Graphics component (CVE-2026-74964)
- firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)
- firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "firefox"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "140.14.0-1.el9_8.alma.1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "firefox-x11"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "140.14.0-1.el9_8.alma.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. \n\nSecurity Fix(es): \n\n * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)\n * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)\n * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)\n * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)\n * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)\n * firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component (CVE-2026-74971)\n * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)\n * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)\n * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)\n * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)\n * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)\n * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)\n * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)\n * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)\n * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)\n * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)\n * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)\n * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)\n * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)\n * firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)\n * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)\n * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)\n * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)\n * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)\n * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)\n * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-74944)\n * firefox: Integer overflow in the Graphics component (CVE-2026-74964)\n * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)\n * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:58897",
"modified": "2026-08-26T06:50:06Z",
"published": "2026-08-24T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74934"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74935"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74936"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74939"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74940"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74941"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74942"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74943"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74944"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74945"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74946"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74948"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74949"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74953"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74957"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74959"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74960"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74962"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74963"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74964"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74965"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74967"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74969"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74971"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74972"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74973"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74974"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74976"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74983"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74987"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74990"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517819"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517820"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517822"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517823"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517825"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517826"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517831"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517834"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517835"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517836"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517837"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517839"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517840"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517841"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517845"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517846"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517849"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517851"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517853"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517856"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517858"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517859"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517860"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517862"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517863"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517866"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517868"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517870"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517872"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517874"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/9/ALSA-2026-58897.html"
}
],
"related": [
"CVE-2026-74983",
"CVE-2026-74934",
"CVE-2026-74953",
"CVE-2026-74987",
"CVE-2026-74948",
"CVE-2026-74943",
"CVE-2026-74971",
"CVE-2026-74941",
"CVE-2026-74965",
"CVE-2026-74946",
"CVE-2026-74973",
"CVE-2026-74949",
"CVE-2026-74990",
"CVE-2026-74936",
"CVE-2026-74940",
"CVE-2026-74960",
"CVE-2026-74969",
"CVE-2026-74959",
"CVE-2026-74976",
"CVE-2026-74974",
"CVE-2026-74957",
"CVE-2026-74967",
"CVE-2026-74942",
"CVE-2026-74939",
"CVE-2026-74972",
"CVE-2026-74945",
"CVE-2026-74963",
"CVE-2026-74944",
"CVE-2026-74964",
"CVE-2026-74962",
"CVE-2026-74935"
],
"summary": "Important: firefox security update"
}
alsa-2026:58898
Vulnerability from osv_almalinux
Published
2026-08-24 00:00
Modified
2026-08-26 06:50
Summary
Important: firefox security update
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
- firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)
- firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)
- firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)
- firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)
- firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)
- firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971)
- firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)
- firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)
- firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)
- firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)
- firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)
- firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)
- firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)
- firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)
- firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)
- firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)
- firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)
- firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)
- firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)
- firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)
- firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)
- firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)
- firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)
- firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)
- firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)
- firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944)
- firefox: Integer overflow in the Graphics component (CVE-2026-74964)
- firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)
- firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "firefox"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "140.14.0-1.el8_10.alma.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. \n\nSecurity Fix(es): \n\n * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)\n * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)\n * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)\n * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)\n * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)\n * firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component (CVE-2026-74971)\n * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)\n * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)\n * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)\n * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)\n * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)\n * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)\n * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)\n * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)\n * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)\n * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)\n * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)\n * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)\n * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)\n * firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)\n * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)\n * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)\n * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)\n * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)\n * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)\n * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-74944)\n * firefox: Integer overflow in the Graphics component (CVE-2026-74964)\n * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)\n * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:58898",
"modified": "2026-08-26T06:50:02Z",
"published": "2026-08-24T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:58898"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74934"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74935"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74936"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74939"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74940"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74941"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74942"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74943"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74944"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74945"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74946"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74948"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74949"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74953"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74957"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74959"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74960"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74962"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74963"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74964"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74965"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74967"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74969"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74971"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74972"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74973"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74974"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74976"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74983"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74987"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74990"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517819"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517820"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517822"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517823"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517825"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517826"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517831"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517834"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517835"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517836"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517837"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517839"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517840"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517841"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517845"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517846"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517849"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517851"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517853"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517856"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517858"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517859"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517860"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517862"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517863"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517866"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517868"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517870"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517872"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517874"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2026-58898.html"
}
],
"related": [
"CVE-2026-74983",
"CVE-2026-74934",
"CVE-2026-74953",
"CVE-2026-74987",
"CVE-2026-74948",
"CVE-2026-74943",
"CVE-2026-74971",
"CVE-2026-74941",
"CVE-2026-74965",
"CVE-2026-74946",
"CVE-2026-74973",
"CVE-2026-74949",
"CVE-2026-74990",
"CVE-2026-74936",
"CVE-2026-74940",
"CVE-2026-74960",
"CVE-2026-74969",
"CVE-2026-74959",
"CVE-2026-74976",
"CVE-2026-74974",
"CVE-2026-74957",
"CVE-2026-74967",
"CVE-2026-74942",
"CVE-2026-74939",
"CVE-2026-74972",
"CVE-2026-74945",
"CVE-2026-74963",
"CVE-2026-74944",
"CVE-2026-74964",
"CVE-2026-74962",
"CVE-2026-74935"
],
"summary": "Important: firefox security update"
}
alsa-2026:58899
Vulnerability from osv_almalinux
Published
2026-08-24 00:00
Modified
2026-08-26 06:49
Summary
Important: firefox security update
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
- firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)
- firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)
- firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)
- firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)
- firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)
- firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971)
- firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)
- firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)
- firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)
- firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)
- firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)
- firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)
- firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)
- firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)
- firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)
- firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)
- firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)
- firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)
- firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)
- firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)
- firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)
- firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)
- firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)
- firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)
- firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)
- firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)
- firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944)
- firefox: Integer overflow in the Graphics component (CVE-2026-74964)
- firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)
- firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "firefox"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "140.14.0-1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. \n\nSecurity Fix(es): \n\n * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)\n * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)\n * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)\n * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)\n * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)\n * firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component (CVE-2026-74971)\n * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)\n * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)\n * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)\n * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)\n * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)\n * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)\n * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)\n * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)\n * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)\n * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)\n * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)\n * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)\n * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)\n * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)\n * firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)\n * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)\n * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)\n * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)\n * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)\n * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)\n * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-74944)\n * firefox: Integer overflow in the Graphics component (CVE-2026-74964)\n * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)\n * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:58899",
"modified": "2026-08-26T06:49:51Z",
"published": "2026-08-24T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:58899"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74934"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74935"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74936"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74939"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74940"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74941"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74942"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74943"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74944"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74945"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74946"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74948"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74949"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74953"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74957"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74959"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74960"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74962"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74963"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74964"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74965"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74967"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74969"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74971"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74972"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74973"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74974"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74976"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74983"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74987"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-74990"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517819"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517820"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517822"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517823"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517825"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517826"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517831"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517834"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517835"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517836"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517837"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517839"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517840"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517841"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517845"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517846"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517849"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517851"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517853"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517856"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517858"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517859"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517860"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517862"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517863"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517866"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517868"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517870"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517872"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2517874"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/10/ALSA-2026-58899.html"
}
],
"related": [
"CVE-2026-74983",
"CVE-2026-74934",
"CVE-2026-74953",
"CVE-2026-74987",
"CVE-2026-74948",
"CVE-2026-74943",
"CVE-2026-74971",
"CVE-2026-74941",
"CVE-2026-74965",
"CVE-2026-74946",
"CVE-2026-74973",
"CVE-2026-74949",
"CVE-2026-74990",
"CVE-2026-74936",
"CVE-2026-74940",
"CVE-2026-74960",
"CVE-2026-74969",
"CVE-2026-74959",
"CVE-2026-74976",
"CVE-2026-74974",
"CVE-2026-74957",
"CVE-2026-74967",
"CVE-2026-74942",
"CVE-2026-74939",
"CVE-2026-74972",
"CVE-2026-74945",
"CVE-2026-74963",
"CVE-2026-74944",
"CVE-2026-74964",
"CVE-2026-74962",
"CVE-2026-74935"
],
"summary": "Important: firefox security update"
}
CERTFR-2026-AVI-1054
Vulnerability from certfr_avis - Published: 2026-08-19 - Updated: 2026-08-19
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 154 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.39 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.1 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.14 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.14 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 153.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 154 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 154",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.39",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.14",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.14",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 153.1",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 154",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-74973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74973"
},
{
"name": "CVE-2026-74966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74966"
},
{
"name": "CVE-2026-74944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74944"
},
{
"name": "CVE-2026-74936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74936"
},
{
"name": "CVE-2026-74989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74989"
},
{
"name": "CVE-2026-74948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74948"
},
{
"name": "CVE-2026-74963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74963"
},
{
"name": "CVE-2026-74975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74975"
},
{
"name": "CVE-2026-74946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74946"
},
{
"name": "CVE-2026-74947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74947"
},
{
"name": "CVE-2026-74951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74951"
},
{
"name": "CVE-2026-74974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74974"
},
{
"name": "CVE-2026-74937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74937"
},
{
"name": "CVE-2026-74967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74967"
},
{
"name": "CVE-2026-74978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74978"
},
{
"name": "CVE-2026-74955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74955"
},
{
"name": "CVE-2026-74990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74990"
},
{
"name": "CVE-2026-74972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74972"
},
{
"name": "CVE-2026-74980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74980"
},
{
"name": "CVE-2026-74956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74956"
},
{
"name": "CVE-2026-74958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74958"
},
{
"name": "CVE-2026-74969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74969"
},
{
"name": "CVE-2026-74953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74953"
},
{
"name": "CVE-2026-74945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74945"
},
{
"name": "CVE-2026-74950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74950"
},
{
"name": "CVE-2026-74968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74968"
},
{
"name": "CVE-2026-74965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74965"
},
{
"name": "CVE-2026-74986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74986"
},
{
"name": "CVE-2026-74970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74970"
},
{
"name": "CVE-2026-74959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74959"
},
{
"name": "CVE-2026-74949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74949"
},
{
"name": "CVE-2026-74940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74940"
},
{
"name": "CVE-2026-74984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74984"
},
{
"name": "CVE-2026-74943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74943"
},
{
"name": "CVE-2026-74979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74979"
},
{
"name": "CVE-2026-74988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74988"
},
{
"name": "CVE-2026-74954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74954"
},
{
"name": "CVE-2026-74960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74960"
},
{
"name": "CVE-2026-74964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74964"
},
{
"name": "CVE-2026-74957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74957"
},
{
"name": "CVE-2026-74985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74985"
},
{
"name": "CVE-2026-74939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74939"
},
{
"name": "CVE-2026-74952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74952"
},
{
"name": "CVE-2026-74961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74961"
},
{
"name": "CVE-2026-74971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74971"
},
{
"name": "CVE-2026-74941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74941"
},
{
"name": "CVE-2026-74976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74976"
},
{
"name": "CVE-2026-74935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74935"
},
{
"name": "CVE-2026-74987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74987"
},
{
"name": "CVE-2026-75874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75874"
},
{
"name": "CVE-2026-74982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74982"
},
{
"name": "CVE-2026-74981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74981"
},
{
"name": "CVE-2026-74977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74977"
},
{
"name": "CVE-2026-74934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74934"
},
{
"name": "CVE-2026-74938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74938"
},
{
"name": "CVE-2026-74962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74962"
},
{
"name": "CVE-2026-74942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74942"
},
{
"name": "CVE-2026-74983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74983"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1054",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-80",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-80/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-75",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-75/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-74",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-76",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-77",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-77/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-79",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-78",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-78/"
}
]
}
FKIE_CVE-2026-74969
Vulnerability from fkie_nvd - Published: 2026-08-18 13:17 - Updated: 2026-08-19 17:21
Severity
Summary
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
References
| URL | Tags | ||
|---|---|---|---|
| security@mozilla.org | https://bugzilla.mozilla.org/show_bug.cgi?id=2056065 | Permissions Required | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-74/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-75/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-76/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-77/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-78/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-79/ | Vendor Advisory | |
| security@mozilla.org | https://www.mozilla.org/security/advisories/mfsa2026-80/ | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| mozilla | firefox | * | |
| mozilla | firefox | * | |
| mozilla | firefox | * | |
| mozilla | thunderbird | * | |
| mozilla | thunderbird | * |
{
"affected": [
{
"affectedData": [
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "115.*",
"status": "unaffected",
"version": "115.39",
"versionType": "rpm"
},
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.14",
"versionType": "rpm"
},
{
"lessThanOrEqual": "153.*",
"status": "unaffected",
"version": "153.1",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "154",
"versionType": "rpm"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThanOrEqual": "140.*",
"status": "unaffected",
"version": "140.14",
"versionType": "rpm"
},
{
"lessThanOrEqual": "153.*",
"status": "unaffected",
"version": "153.1",
"versionType": "rpm"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "154",
"versionType": "rpm"
}
]
}
],
"source": "security@mozilla.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FD8DBFC4-10A7-41E2-B754-71CC6FEEBB5C",
"versionEndExcluding": "115.39.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "502016C0-F897-4F18-BFC7-301B71D93E4D",
"versionEndExcluding": "140.14.0",
"versionStartIncluding": "116.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5D58C9D3-E300-408A-ABF2-6E2BB49AB921",
"versionEndExcluding": "153.1.0",
"versionStartIncluding": "141.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4E2EC2AA-23B2-45C9-8594-DF80A0D800A7",
"versionEndExcluding": "140.14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"matchCriteriaId": "47206424-A249-46CE-9776-F45A49344204",
"versionEndExcluding": "153.1.0",
"versionStartIncluding": "141.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1."
}
],
"id": "CVE-2026-74969",
"lastModified": "2026-08-19T17:21:12.120",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-74969",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-19T13:01:42.434010Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-08-18T13:17:34.317",
"references": [
{
"source": "security@mozilla.org",
"tags": [
"Permissions Required"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056065"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-74/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-75/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-77/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-78/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/"
},
{
"source": "security@mozilla.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.mozilla.org/security/advisories/mfsa2026-80/"
}
],
"sourceIdentifier": "security@mozilla.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-2GP7-2525-93FM
Vulnerability from github – Published: 2026-08-18 15:31 – Updated: 2026-08-19 15:32
VLAI
Details
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.
Severity
8.8 (High)
{
"affected": [],
"aliases": [
"CVE-2026-74969"
],
"database_specific": {
"cwe_ids": [
"CWE-359",
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-08-18T13:17:34Z",
"severity": "HIGH"
},
"details": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1.",
"id": "GHSA-2gp7-2525-93fm",
"modified": "2026-08-19T15:32:02Z",
"published": "2026-08-18T15:31:42Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74969"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2056065"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-74"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-75"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-77"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-78"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-80"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
OPENSUSE-SU-2026:11546-1
Vulnerability from csaf_opensuse - Published: 2026-08-19 00:00 - Updated: 2026-08-19 00:00Summary
firefox-esr-153.1.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: firefox-esr-153.1.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the firefox-esr-153.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11546
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
158 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-74934/ | self |
| https://www.suse.com/security/cve/CVE-2026-74935/ | self |
| https://www.suse.com/security/cve/CVE-2026-74936/ | self |
| https://www.suse.com/security/cve/CVE-2026-74937/ | self |
| https://www.suse.com/security/cve/CVE-2026-74938/ | self |
| https://www.suse.com/security/cve/CVE-2026-74939/ | self |
| https://www.suse.com/security/cve/CVE-2026-74940/ | self |
| https://www.suse.com/security/cve/CVE-2026-74941/ | self |
| https://www.suse.com/security/cve/CVE-2026-74942/ | self |
| https://www.suse.com/security/cve/CVE-2026-74943/ | self |
| https://www.suse.com/security/cve/CVE-2026-74944/ | self |
| https://www.suse.com/security/cve/CVE-2026-74945/ | self |
| https://www.suse.com/security/cve/CVE-2026-74946/ | self |
| https://www.suse.com/security/cve/CVE-2026-74947/ | self |
| https://www.suse.com/security/cve/CVE-2026-74948/ | self |
| https://www.suse.com/security/cve/CVE-2026-74949/ | self |
| https://www.suse.com/security/cve/CVE-2026-74950/ | self |
| https://www.suse.com/security/cve/CVE-2026-74953/ | self |
| https://www.suse.com/security/cve/CVE-2026-74954/ | self |
| https://www.suse.com/security/cve/CVE-2026-74955/ | self |
| https://www.suse.com/security/cve/CVE-2026-74956/ | self |
| https://www.suse.com/security/cve/CVE-2026-74957/ | self |
| https://www.suse.com/security/cve/CVE-2026-74958/ | self |
| https://www.suse.com/security/cve/CVE-2026-74959/ | self |
| https://www.suse.com/security/cve/CVE-2026-74960/ | self |
| https://www.suse.com/security/cve/CVE-2026-74961/ | self |
| https://www.suse.com/security/cve/CVE-2026-74962/ | self |
| https://www.suse.com/security/cve/CVE-2026-74963/ | self |
| https://www.suse.com/security/cve/CVE-2026-74964/ | self |
| https://www.suse.com/security/cve/CVE-2026-74965/ | self |
| https://www.suse.com/security/cve/CVE-2026-74966/ | self |
| https://www.suse.com/security/cve/CVE-2026-74967/ | self |
| https://www.suse.com/security/cve/CVE-2026-74968/ | self |
| https://www.suse.com/security/cve/CVE-2026-74969/ | self |
| https://www.suse.com/security/cve/CVE-2026-74970/ | self |
| https://www.suse.com/security/cve/CVE-2026-74971/ | self |
| https://www.suse.com/security/cve/CVE-2026-74972/ | self |
| https://www.suse.com/security/cve/CVE-2026-74973/ | self |
| https://www.suse.com/security/cve/CVE-2026-74974/ | self |
| https://www.suse.com/security/cve/CVE-2026-74976/ | self |
| https://www.suse.com/security/cve/CVE-2026-74977/ | self |
| https://www.suse.com/security/cve/CVE-2026-74978/ | self |
| https://www.suse.com/security/cve/CVE-2026-74979/ | self |
| https://www.suse.com/security/cve/CVE-2026-74981/ | self |
| https://www.suse.com/security/cve/CVE-2026-74982/ | self |
| https://www.suse.com/security/cve/CVE-2026-74983/ | self |
| https://www.suse.com/security/cve/CVE-2026-74984/ | self |
| https://www.suse.com/security/cve/CVE-2026-74985/ | self |
| https://www.suse.com/security/cve/CVE-2026-74986/ | self |
| https://www.suse.com/security/cve/CVE-2026-74987/ | self |
| https://www.suse.com/security/cve/CVE-2026-74988/ | self |
| https://www.suse.com/security/cve/CVE-2026-74990/ | self |
| https://www.suse.com/security/cve/CVE-2026-74934 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74935 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74936 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74937 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74938 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74939 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74940 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74941 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74942 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74943 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74944 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74945 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74946 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74947 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74948 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74949 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74950 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74953 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74954 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74955 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74956 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74957 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74958 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74959 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74960 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74961 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74962 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74963 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74964 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74965 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74966 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74967 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74968 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74969 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74970 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74971 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74972 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74973 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74974 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74976 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74977 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74978 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74979 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74981 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74982 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74983 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74984 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74985 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74986 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74987 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74988 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74990 | external |
| https://bugzilla.suse.com/1274867 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "firefox-esr-153.1.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the firefox-esr-153.1.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11546",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11546-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74938 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74939 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74945 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74955 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74956 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74957 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74958 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74961 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74962 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74966 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74970 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74973 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74977 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74978 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74979 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74985 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74987 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74988 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74990 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74990/"
}
],
"title": "firefox-esr-153.1.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-08-19T00:00:00Z",
"generator": {
"date": "2026-08-19T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11546-1",
"initial_release_date": "2026-08-19T00:00:00Z",
"revision_history": [
{
"date": "2026-08-19T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "firefox-esr-153.1.0-1.1.aarch64",
"product": {
"name": "firefox-esr-153.1.0-1.1.aarch64",
"product_id": "firefox-esr-153.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"product": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"product_id": "firefox-esr-branding-upstream-153.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-common-153.1.0-1.1.aarch64",
"product": {
"name": "firefox-esr-translations-common-153.1.0-1.1.aarch64",
"product_id": "firefox-esr-translations-common-153.1.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-other-153.1.0-1.1.aarch64",
"product": {
"name": "firefox-esr-translations-other-153.1.0-1.1.aarch64",
"product_id": "firefox-esr-translations-other-153.1.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-esr-153.1.0-1.1.ppc64le",
"product": {
"name": "firefox-esr-153.1.0-1.1.ppc64le",
"product_id": "firefox-esr-153.1.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"product": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"product_id": "firefox-esr-branding-upstream-153.1.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"product": {
"name": "firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"product_id": "firefox-esr-translations-common-153.1.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"product": {
"name": "firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"product_id": "firefox-esr-translations-other-153.1.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-esr-153.1.0-1.1.s390x",
"product": {
"name": "firefox-esr-153.1.0-1.1.s390x",
"product_id": "firefox-esr-153.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"product": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"product_id": "firefox-esr-branding-upstream-153.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-common-153.1.0-1.1.s390x",
"product": {
"name": "firefox-esr-translations-common-153.1.0-1.1.s390x",
"product_id": "firefox-esr-translations-common-153.1.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-other-153.1.0-1.1.s390x",
"product": {
"name": "firefox-esr-translations-other-153.1.0-1.1.s390x",
"product_id": "firefox-esr-translations-other-153.1.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-esr-153.1.0-1.1.x86_64",
"product": {
"name": "firefox-esr-153.1.0-1.1.x86_64",
"product_id": "firefox-esr-153.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"product": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"product_id": "firefox-esr-branding-upstream-153.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-common-153.1.0-1.1.x86_64",
"product": {
"name": "firefox-esr-translations-common-153.1.0-1.1.x86_64",
"product_id": "firefox-esr-translations-common-153.1.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "firefox-esr-translations-other-153.1.0-1.1.x86_64",
"product": {
"name": "firefox-esr-translations-other-153.1.0-1.1.x86_64",
"product_id": "firefox-esr-translations-other-153.1.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-153.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64"
},
"product_reference": "firefox-esr-153.1.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-153.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le"
},
"product_reference": "firefox-esr-153.1.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-153.1.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x"
},
"product_reference": "firefox-esr-153.1.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-153.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64"
},
"product_reference": "firefox-esr-153.1.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64"
},
"product_reference": "firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le"
},
"product_reference": "firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x"
},
"product_reference": "firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-branding-upstream-153.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64"
},
"product_reference": "firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-common-153.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64"
},
"product_reference": "firefox-esr-translations-common-153.1.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-common-153.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le"
},
"product_reference": "firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-common-153.1.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x"
},
"product_reference": "firefox-esr-translations-common-153.1.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-common-153.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64"
},
"product_reference": "firefox-esr-translations-common-153.1.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-other-153.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64"
},
"product_reference": "firefox-esr-translations-other-153.1.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-other-153.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le"
},
"product_reference": "firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-other-153.1.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x"
},
"product_reference": "firefox-esr-translations-other-153.1.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-esr-translations-other-153.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
},
"product_reference": "firefox-esr-translations-other-153.1.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-74934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74934"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74934",
"url": "https://www.suse.com/security/cve/CVE-2026-74934"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74934",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74934"
},
{
"cve": "CVE-2026-74935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74935"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74935",
"url": "https://www.suse.com/security/cve/CVE-2026-74935"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74935",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74935"
},
{
"cve": "CVE-2026-74936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74936"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74936",
"url": "https://www.suse.com/security/cve/CVE-2026-74936"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74936",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74936"
},
{
"cve": "CVE-2026-74937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74937"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74937",
"url": "https://www.suse.com/security/cve/CVE-2026-74937"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74937",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74937"
},
{
"cve": "CVE-2026-74938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74938"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74938",
"url": "https://www.suse.com/security/cve/CVE-2026-74938"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74938",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74938"
},
{
"cve": "CVE-2026-74939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74939"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74939",
"url": "https://www.suse.com/security/cve/CVE-2026-74939"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74939",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74939"
},
{
"cve": "CVE-2026-74940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74940"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74940",
"url": "https://www.suse.com/security/cve/CVE-2026-74940"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74940",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74940"
},
{
"cve": "CVE-2026-74941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74941"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74941",
"url": "https://www.suse.com/security/cve/CVE-2026-74941"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74941",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74941"
},
{
"cve": "CVE-2026-74942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74942"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74942",
"url": "https://www.suse.com/security/cve/CVE-2026-74942"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74942",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74942"
},
{
"cve": "CVE-2026-74943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74943"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74943",
"url": "https://www.suse.com/security/cve/CVE-2026-74943"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74943",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74943"
},
{
"cve": "CVE-2026-74944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74944"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74944",
"url": "https://www.suse.com/security/cve/CVE-2026-74944"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74944",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74944"
},
{
"cve": "CVE-2026-74945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74945"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74945",
"url": "https://www.suse.com/security/cve/CVE-2026-74945"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74945",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74945"
},
{
"cve": "CVE-2026-74946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74946"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74946",
"url": "https://www.suse.com/security/cve/CVE-2026-74946"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74946",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74946"
},
{
"cve": "CVE-2026-74947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74947"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74947",
"url": "https://www.suse.com/security/cve/CVE-2026-74947"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74947",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74947"
},
{
"cve": "CVE-2026-74948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74948"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74948",
"url": "https://www.suse.com/security/cve/CVE-2026-74948"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74948",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74948"
},
{
"cve": "CVE-2026-74949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74949"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74949",
"url": "https://www.suse.com/security/cve/CVE-2026-74949"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74949",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74949"
},
{
"cve": "CVE-2026-74950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74950"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74950",
"url": "https://www.suse.com/security/cve/CVE-2026-74950"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74950",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74950"
},
{
"cve": "CVE-2026-74953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74953"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74953",
"url": "https://www.suse.com/security/cve/CVE-2026-74953"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74953",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74953"
},
{
"cve": "CVE-2026-74954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74954"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74954",
"url": "https://www.suse.com/security/cve/CVE-2026-74954"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74954",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74954"
},
{
"cve": "CVE-2026-74955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74955"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74955",
"url": "https://www.suse.com/security/cve/CVE-2026-74955"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74955",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74955"
},
{
"cve": "CVE-2026-74956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74956"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74956",
"url": "https://www.suse.com/security/cve/CVE-2026-74956"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74956",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74956"
},
{
"cve": "CVE-2026-74957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74957"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74957",
"url": "https://www.suse.com/security/cve/CVE-2026-74957"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74957",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74957"
},
{
"cve": "CVE-2026-74958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74958"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74958",
"url": "https://www.suse.com/security/cve/CVE-2026-74958"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74958",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74958"
},
{
"cve": "CVE-2026-74959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74959"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74959",
"url": "https://www.suse.com/security/cve/CVE-2026-74959"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74959",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74959"
},
{
"cve": "CVE-2026-74960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74960"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74960",
"url": "https://www.suse.com/security/cve/CVE-2026-74960"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74960",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74960"
},
{
"cve": "CVE-2026-74961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74961"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74961",
"url": "https://www.suse.com/security/cve/CVE-2026-74961"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74961",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74961"
},
{
"cve": "CVE-2026-74962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74962"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74962",
"url": "https://www.suse.com/security/cve/CVE-2026-74962"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74962",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74962"
},
{
"cve": "CVE-2026-74963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74963"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74963",
"url": "https://www.suse.com/security/cve/CVE-2026-74963"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74963",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74963"
},
{
"cve": "CVE-2026-74964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74964"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74964",
"url": "https://www.suse.com/security/cve/CVE-2026-74964"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74964",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74964"
},
{
"cve": "CVE-2026-74965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74965"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74965",
"url": "https://www.suse.com/security/cve/CVE-2026-74965"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74965",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74965"
},
{
"cve": "CVE-2026-74966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74966"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74966",
"url": "https://www.suse.com/security/cve/CVE-2026-74966"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74966",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74966"
},
{
"cve": "CVE-2026-74967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74967"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74967",
"url": "https://www.suse.com/security/cve/CVE-2026-74967"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74967",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74967"
},
{
"cve": "CVE-2026-74968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74968"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74968",
"url": "https://www.suse.com/security/cve/CVE-2026-74968"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74968",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74968"
},
{
"cve": "CVE-2026-74969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74969"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74969",
"url": "https://www.suse.com/security/cve/CVE-2026-74969"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74969",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74969"
},
{
"cve": "CVE-2026-74970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74970"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74970",
"url": "https://www.suse.com/security/cve/CVE-2026-74970"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74970",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74970"
},
{
"cve": "CVE-2026-74971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74971"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74971",
"url": "https://www.suse.com/security/cve/CVE-2026-74971"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74971",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74971"
},
{
"cve": "CVE-2026-74972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74972"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74972",
"url": "https://www.suse.com/security/cve/CVE-2026-74972"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74972",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74972"
},
{
"cve": "CVE-2026-74973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74973"
}
],
"notes": [
{
"category": "general",
"text": "Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74973",
"url": "https://www.suse.com/security/cve/CVE-2026-74973"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74973",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74973"
},
{
"cve": "CVE-2026-74974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74974"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74974",
"url": "https://www.suse.com/security/cve/CVE-2026-74974"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74974",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74974"
},
{
"cve": "CVE-2026-74976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74976"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74976",
"url": "https://www.suse.com/security/cve/CVE-2026-74976"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74976",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74976"
},
{
"cve": "CVE-2026-74977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74977"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74977",
"url": "https://www.suse.com/security/cve/CVE-2026-74977"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74977",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74977"
},
{
"cve": "CVE-2026-74978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74978"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74978",
"url": "https://www.suse.com/security/cve/CVE-2026-74978"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74978",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74978"
},
{
"cve": "CVE-2026-74979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74979"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74979",
"url": "https://www.suse.com/security/cve/CVE-2026-74979"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74979",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74979"
},
{
"cve": "CVE-2026-74981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74981"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74981",
"url": "https://www.suse.com/security/cve/CVE-2026-74981"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74981",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74981"
},
{
"cve": "CVE-2026-74982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74982"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74982",
"url": "https://www.suse.com/security/cve/CVE-2026-74982"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74982",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74982"
},
{
"cve": "CVE-2026-74983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74983"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74983",
"url": "https://www.suse.com/security/cve/CVE-2026-74983"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74983",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74983"
},
{
"cve": "CVE-2026-74984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74984"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74984",
"url": "https://www.suse.com/security/cve/CVE-2026-74984"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74984",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74984"
},
{
"cve": "CVE-2026-74985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74985"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74985",
"url": "https://www.suse.com/security/cve/CVE-2026-74985"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74985",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74985"
},
{
"cve": "CVE-2026-74986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74986"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74986",
"url": "https://www.suse.com/security/cve/CVE-2026-74986"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74986",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74986"
},
{
"cve": "CVE-2026-74987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74987"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74987",
"url": "https://www.suse.com/security/cve/CVE-2026-74987"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74987",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74987"
},
{
"cve": "CVE-2026-74988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74988"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74988",
"url": "https://www.suse.com/security/cve/CVE-2026-74988"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74988",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74988"
},
{
"cve": "CVE-2026-74990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74990"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74990",
"url": "https://www.suse.com/security/cve/CVE-2026-74990"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74990",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-branding-upstream-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-common-153.1.0-1.1.x86_64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.aarch64",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.ppc64le",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.s390x",
"openSUSE Tumbleweed:firefox-esr-translations-other-153.1.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74990"
}
]
}
OPENSUSE-SU-2026:11558-1
Vulnerability from csaf_opensuse - Published: 2026-08-20 00:00 - Updated: 2026-08-20 00:00Summary
MozillaThunderbird-140.14.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: MozillaThunderbird-140.14.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11558
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
95 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-74934/ | self |
| https://www.suse.com/security/cve/CVE-2026-74935/ | self |
| https://www.suse.com/security/cve/CVE-2026-74936/ | self |
| https://www.suse.com/security/cve/CVE-2026-74939/ | self |
| https://www.suse.com/security/cve/CVE-2026-74940/ | self |
| https://www.suse.com/security/cve/CVE-2026-74941/ | self |
| https://www.suse.com/security/cve/CVE-2026-74942/ | self |
| https://www.suse.com/security/cve/CVE-2026-74943/ | self |
| https://www.suse.com/security/cve/CVE-2026-74944/ | self |
| https://www.suse.com/security/cve/CVE-2026-74945/ | self |
| https://www.suse.com/security/cve/CVE-2026-74946/ | self |
| https://www.suse.com/security/cve/CVE-2026-74948/ | self |
| https://www.suse.com/security/cve/CVE-2026-74949/ | self |
| https://www.suse.com/security/cve/CVE-2026-74953/ | self |
| https://www.suse.com/security/cve/CVE-2026-74957/ | self |
| https://www.suse.com/security/cve/CVE-2026-74959/ | self |
| https://www.suse.com/security/cve/CVE-2026-74960/ | self |
| https://www.suse.com/security/cve/CVE-2026-74962/ | self |
| https://www.suse.com/security/cve/CVE-2026-74963/ | self |
| https://www.suse.com/security/cve/CVE-2026-74964/ | self |
| https://www.suse.com/security/cve/CVE-2026-74965/ | self |
| https://www.suse.com/security/cve/CVE-2026-74967/ | self |
| https://www.suse.com/security/cve/CVE-2026-74969/ | self |
| https://www.suse.com/security/cve/CVE-2026-74971/ | self |
| https://www.suse.com/security/cve/CVE-2026-74972/ | self |
| https://www.suse.com/security/cve/CVE-2026-74973/ | self |
| https://www.suse.com/security/cve/CVE-2026-74974/ | self |
| https://www.suse.com/security/cve/CVE-2026-74976/ | self |
| https://www.suse.com/security/cve/CVE-2026-74983/ | self |
| https://www.suse.com/security/cve/CVE-2026-74987/ | self |
| https://www.suse.com/security/cve/CVE-2026-74990/ | self |
| https://www.suse.com/security/cve/CVE-2026-74934 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74935 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74936 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74939 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74940 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74941 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74942 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74943 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74944 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74945 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74946 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74948 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74949 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74953 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74957 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74959 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74960 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74962 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74963 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74964 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74965 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74967 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74969 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74971 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74972 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74973 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74974 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74976 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74983 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74987 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74990 | external |
| https://bugzilla.suse.com/1274867 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "MozillaThunderbird-140.14.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11558",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11558-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74939 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74945 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74957 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74962 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74973 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74987 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74990 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74990/"
}
],
"title": "MozillaThunderbird-140.14.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-08-20T00:00:00Z",
"generator": {
"date": "2026-08-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11558-1",
"initial_release_date": "2026-08-20T00:00:00Z",
"revision_history": [
{
"date": "2026-08-20T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-140.14.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-140.14.0-1.1.aarch64",
"product_id": "MozillaThunderbird-140.14.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"product_id": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-common-140.14.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-other-140.14.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-140.14.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-140.14.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-140.14.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-140.14.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-140.14.0-1.1.s390x",
"product_id": "MozillaThunderbird-140.14.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"product_id": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-common-140.14.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-other-140.14.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-140.14.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-140.14.0-1.1.x86_64",
"product_id": "MozillaThunderbird-140.14.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"product_id": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-140.14.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-140.14.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-140.14.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-140.14.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-140.14.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-140.14.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-140.14.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-140.14.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-140.14.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-140.14.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-140.14.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-140.14.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-74934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74934"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74934",
"url": "https://www.suse.com/security/cve/CVE-2026-74934"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74934",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74934"
},
{
"cve": "CVE-2026-74935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74935"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74935",
"url": "https://www.suse.com/security/cve/CVE-2026-74935"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74935",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74935"
},
{
"cve": "CVE-2026-74936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74936"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74936",
"url": "https://www.suse.com/security/cve/CVE-2026-74936"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74936",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74936"
},
{
"cve": "CVE-2026-74939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74939"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74939",
"url": "https://www.suse.com/security/cve/CVE-2026-74939"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74939",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74939"
},
{
"cve": "CVE-2026-74940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74940"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74940",
"url": "https://www.suse.com/security/cve/CVE-2026-74940"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74940",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74940"
},
{
"cve": "CVE-2026-74941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74941"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74941",
"url": "https://www.suse.com/security/cve/CVE-2026-74941"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74941",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74941"
},
{
"cve": "CVE-2026-74942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74942"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74942",
"url": "https://www.suse.com/security/cve/CVE-2026-74942"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74942",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74942"
},
{
"cve": "CVE-2026-74943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74943"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74943",
"url": "https://www.suse.com/security/cve/CVE-2026-74943"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74943",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74943"
},
{
"cve": "CVE-2026-74944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74944"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74944",
"url": "https://www.suse.com/security/cve/CVE-2026-74944"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74944",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74944"
},
{
"cve": "CVE-2026-74945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74945"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74945",
"url": "https://www.suse.com/security/cve/CVE-2026-74945"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74945",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74945"
},
{
"cve": "CVE-2026-74946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74946"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74946",
"url": "https://www.suse.com/security/cve/CVE-2026-74946"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74946",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74946"
},
{
"cve": "CVE-2026-74948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74948"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74948",
"url": "https://www.suse.com/security/cve/CVE-2026-74948"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74948",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74948"
},
{
"cve": "CVE-2026-74949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74949"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74949",
"url": "https://www.suse.com/security/cve/CVE-2026-74949"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74949",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74949"
},
{
"cve": "CVE-2026-74953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74953"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74953",
"url": "https://www.suse.com/security/cve/CVE-2026-74953"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74953",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74953"
},
{
"cve": "CVE-2026-74957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74957"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74957",
"url": "https://www.suse.com/security/cve/CVE-2026-74957"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74957",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74957"
},
{
"cve": "CVE-2026-74959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74959"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74959",
"url": "https://www.suse.com/security/cve/CVE-2026-74959"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74959",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74959"
},
{
"cve": "CVE-2026-74960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74960"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74960",
"url": "https://www.suse.com/security/cve/CVE-2026-74960"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74960",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74960"
},
{
"cve": "CVE-2026-74962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74962"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74962",
"url": "https://www.suse.com/security/cve/CVE-2026-74962"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74962",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74962"
},
{
"cve": "CVE-2026-74963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74963"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74963",
"url": "https://www.suse.com/security/cve/CVE-2026-74963"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74963",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74963"
},
{
"cve": "CVE-2026-74964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74964"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74964",
"url": "https://www.suse.com/security/cve/CVE-2026-74964"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74964",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74964"
},
{
"cve": "CVE-2026-74965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74965"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74965",
"url": "https://www.suse.com/security/cve/CVE-2026-74965"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74965",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74965"
},
{
"cve": "CVE-2026-74967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74967"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74967",
"url": "https://www.suse.com/security/cve/CVE-2026-74967"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74967",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74967"
},
{
"cve": "CVE-2026-74969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74969"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74969",
"url": "https://www.suse.com/security/cve/CVE-2026-74969"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74969",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74969"
},
{
"cve": "CVE-2026-74971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74971"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74971",
"url": "https://www.suse.com/security/cve/CVE-2026-74971"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74971",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74971"
},
{
"cve": "CVE-2026-74972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74972"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74972",
"url": "https://www.suse.com/security/cve/CVE-2026-74972"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74972",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74972"
},
{
"cve": "CVE-2026-74973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74973"
}
],
"notes": [
{
"category": "general",
"text": "Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74973",
"url": "https://www.suse.com/security/cve/CVE-2026-74973"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74973",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74973"
},
{
"cve": "CVE-2026-74974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74974"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74974",
"url": "https://www.suse.com/security/cve/CVE-2026-74974"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74974",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74974"
},
{
"cve": "CVE-2026-74976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74976"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74976",
"url": "https://www.suse.com/security/cve/CVE-2026-74976"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74976",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74976"
},
{
"cve": "CVE-2026-74983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74983"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74983",
"url": "https://www.suse.com/security/cve/CVE-2026-74983"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74983",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74983"
},
{
"cve": "CVE-2026-74987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74987"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74987",
"url": "https://www.suse.com/security/cve/CVE-2026-74987"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74987",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74987"
},
{
"cve": "CVE-2026-74990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74990"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74990",
"url": "https://www.suse.com/security/cve/CVE-2026-74990"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74990",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-140.14.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-140.14.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74990"
}
]
}
OPENSUSE-SU-2026:21594-1
Vulnerability from csaf_opensuse - Published: 2026-08-19 13:10 - Updated: 2026-08-19 13:10Summary
Security update for MozillaFirefox
Severity
Moderate
Notes
Title of the patch: Security update for MozillaFirefox
Description of the patch: This update for MozillaFirefox fixes the following issues:
Update to Firefox Extended Support Release 140.14.0 ESR.
- MFSA 2026-76 (bsc#1274867)
* CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component
* CVE-2026-74935: Privilege escalation in the DOM: Networking component
* CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component
* CVE-2026-74939: Privilege escalation in the DOM: Navigation component
* CVE-2026-74940: Use-after-free in the Graphics: Text component
* CVE-2026-74941: Privilege escalation in the Graphics: CanvasWebGL component
* CVE-2026-74942: Privilege escalation in the Remote Settings Client component
* CVE-2026-74943: Use-after-free in the Graphics: ImageLib component
* CVE-2026-74944: Use-after-free in the DOM: Core & HTML component
* CVE-2026-74945: Information disclosure in the Graphics: Text component
* CVE-2026-74946: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
* CVE-2026-74948: Information disclosure in the Graphics component
* CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics:Canvas2D component
* CVE-2026-74953: Privilege escalation in the Networking: Cookies component
* CVE-2026-74957: Mitigation bypass in the Safe Browsing component
* CVE-2026-74959: Mitigation bypass in the Storage: Cache API component
* CVE-2026-74960: Site isolation issue in the WebExtensions component
* CVE-2026-74962: Site isolation issue in the Networking: Cookies component
* CVE-2026-74963: Same-origin policy bypass in the Networking: Cookies component
* CVE-2026-74964: Integer overflow in the Graphics component
* CVE-2026-74965: Privilege escalation in the Shell Integration component
* CVE-2026-74967: Same-origin policy bypass in the Audio/Video: Playback component
* CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component
* CVE-2026-74971: Information disclosure in the DOM: UI Events & Focus Handling component
* CVE-2026-74972: Information disclosure in the DOM: Push Subscriptions component
* CVE-2026-74973: Race condition, use-after-free in the Graphics component
* CVE-2026-74974: Same-origin policy bypass in the Graphics: ImageLib component
* CVE-2026-74976: JIT miscompilation in the JavaScript Engine: JIT component
* CVE-2026-74983: Mitigation bypass in the Data Loss Prevention component
* CVE-2026-74987: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
* CVE-2026-74990: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and
Firefox 154
Patchnames: openSUSE-Leap-16.0-1464
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
96 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://bugzilla.suse.com/1274867 | self |
| https://www.suse.com/security/cve/CVE-2026-74934/ | self |
| https://www.suse.com/security/cve/CVE-2026-74935/ | self |
| https://www.suse.com/security/cve/CVE-2026-74936/ | self |
| https://www.suse.com/security/cve/CVE-2026-74939/ | self |
| https://www.suse.com/security/cve/CVE-2026-74940/ | self |
| https://www.suse.com/security/cve/CVE-2026-74941/ | self |
| https://www.suse.com/security/cve/CVE-2026-74942/ | self |
| https://www.suse.com/security/cve/CVE-2026-74943/ | self |
| https://www.suse.com/security/cve/CVE-2026-74944/ | self |
| https://www.suse.com/security/cve/CVE-2026-74945/ | self |
| https://www.suse.com/security/cve/CVE-2026-74946/ | self |
| https://www.suse.com/security/cve/CVE-2026-74948/ | self |
| https://www.suse.com/security/cve/CVE-2026-74949/ | self |
| https://www.suse.com/security/cve/CVE-2026-74953/ | self |
| https://www.suse.com/security/cve/CVE-2026-74957/ | self |
| https://www.suse.com/security/cve/CVE-2026-74959/ | self |
| https://www.suse.com/security/cve/CVE-2026-74960/ | self |
| https://www.suse.com/security/cve/CVE-2026-74962/ | self |
| https://www.suse.com/security/cve/CVE-2026-74963/ | self |
| https://www.suse.com/security/cve/CVE-2026-74964/ | self |
| https://www.suse.com/security/cve/CVE-2026-74965/ | self |
| https://www.suse.com/security/cve/CVE-2026-74967/ | self |
| https://www.suse.com/security/cve/CVE-2026-74969/ | self |
| https://www.suse.com/security/cve/CVE-2026-74971/ | self |
| https://www.suse.com/security/cve/CVE-2026-74972/ | self |
| https://www.suse.com/security/cve/CVE-2026-74973/ | self |
| https://www.suse.com/security/cve/CVE-2026-74974/ | self |
| https://www.suse.com/security/cve/CVE-2026-74976/ | self |
| https://www.suse.com/security/cve/CVE-2026-74983/ | self |
| https://www.suse.com/security/cve/CVE-2026-74987/ | self |
| https://www.suse.com/security/cve/CVE-2026-74990/ | self |
| https://www.suse.com/security/cve/CVE-2026-74934 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74935 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74936 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74939 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74940 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74941 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74942 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74943 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74944 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74945 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74946 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74948 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74949 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74953 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74957 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74959 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74960 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74962 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74963 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74964 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74965 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74967 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74969 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74971 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74972 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74973 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74974 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74976 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74983 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74987 | external |
| https://bugzilla.suse.com/1274867 | external |
| https://www.suse.com/security/cve/CVE-2026-74990 | external |
| https://bugzilla.suse.com/1274867 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 140.14.0 ESR.\n\n- MFSA 2026-76 (bsc#1274867)\n * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component\n * CVE-2026-74935: Privilege escalation in the DOM: Networking component\n * CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component\n * CVE-2026-74939: Privilege escalation in the DOM: Navigation component\n * CVE-2026-74940: Use-after-free in the Graphics: Text component\n * CVE-2026-74941: Privilege escalation in the Graphics: CanvasWebGL component\n * CVE-2026-74942: Privilege escalation in the Remote Settings Client component\n * CVE-2026-74943: Use-after-free in the Graphics: ImageLib component\n * CVE-2026-74944: Use-after-free in the DOM: Core \u0026 HTML component\n * CVE-2026-74945: Information disclosure in the Graphics: Text component\n * CVE-2026-74946: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component\n * CVE-2026-74948: Information disclosure in the Graphics component\n * CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics:Canvas2D component\n * CVE-2026-74953: Privilege escalation in the Networking: Cookies component\n * CVE-2026-74957: Mitigation bypass in the Safe Browsing component\n * CVE-2026-74959: Mitigation bypass in the Storage: Cache API component\n * CVE-2026-74960: Site isolation issue in the WebExtensions component\n * CVE-2026-74962: Site isolation issue in the Networking: Cookies component\n * CVE-2026-74963: Same-origin policy bypass in the Networking: Cookies component\n * CVE-2026-74964: Integer overflow in the Graphics component\n * CVE-2026-74965: Privilege escalation in the Shell Integration component\n * CVE-2026-74967: Same-origin policy bypass in the Audio/Video: Playback component\n * CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component\n * CVE-2026-74971: Information disclosure in the DOM: UI Events \u0026 Focus Handling component\n * CVE-2026-74972: Information disclosure in the DOM: Push Subscriptions component\n * CVE-2026-74973: Race condition, use-after-free in the Graphics component\n * CVE-2026-74974: Same-origin policy bypass in the Graphics: ImageLib component\n * CVE-2026-74976: JIT miscompilation in the JavaScript Engine: JIT component\n * CVE-2026-74983: Mitigation bypass in the Data Loss Prevention component\n * CVE-2026-74987: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154\n * CVE-2026-74990: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and\n Firefox 154\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1464",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21594-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1274867",
"url": "https://bugzilla.suse.com/1274867"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74939 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74945 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74957 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74962 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74973 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74987 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74990 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74990/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2026-08-19T13:10:07Z",
"generator": {
"date": "2026-08-19T13:10:07Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21594-1",
"initial_release_date": "2026-08-19T13:10:07Z",
"revision_history": [
{
"date": "2026-08-19T13:10:07Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.14.0-160000.1.1.aarch64",
"product": {
"name": "MozillaFirefox-140.14.0-160000.1.1.aarch64",
"product_id": "MozillaFirefox-140.14.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"product_id": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"product_id": "MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"product_id": "MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"product": {
"name": "MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"product_id": "MozillaFirefox-devel-140.14.0-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"product": {
"name": "MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"product_id": "MozillaFirefox-140.14.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"product_id": "MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"product_id": "MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.14.0-160000.1.1.s390x",
"product": {
"name": "MozillaFirefox-140.14.0-160000.1.1.s390x",
"product_id": "MozillaFirefox-140.14.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"product_id": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"product": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"product_id": "MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"product": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"product_id": "MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-140.14.0-160000.1.1.x86_64",
"product": {
"name": "MozillaFirefox-140.14.0-160000.1.1.x86_64",
"product_id": "MozillaFirefox-140.14.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"product_id": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"product_id": "MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64",
"product_id": "MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.14.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64"
},
"product_reference": "MozillaFirefox-140.14.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.14.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le"
},
"product_reference": "MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.14.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x"
},
"product_reference": "MozillaFirefox-140.14.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-140.14.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64"
},
"product_reference": "MozillaFirefox-140.14.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64"
},
"product_reference": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le"
},
"product_reference": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x"
},
"product_reference": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64"
},
"product_reference": "MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-140.14.0-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch"
},
"product_reference": "MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x"
},
"product_reference": "MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-74934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74934"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74934",
"url": "https://www.suse.com/security/cve/CVE-2026-74934"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74934",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74934"
},
{
"cve": "CVE-2026-74935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74935"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74935",
"url": "https://www.suse.com/security/cve/CVE-2026-74935"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74935",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74935"
},
{
"cve": "CVE-2026-74936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74936"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74936",
"url": "https://www.suse.com/security/cve/CVE-2026-74936"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74936",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74936"
},
{
"cve": "CVE-2026-74939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74939"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74939",
"url": "https://www.suse.com/security/cve/CVE-2026-74939"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74939",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74939"
},
{
"cve": "CVE-2026-74940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74940"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74940",
"url": "https://www.suse.com/security/cve/CVE-2026-74940"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74940",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74940"
},
{
"cve": "CVE-2026-74941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74941"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74941",
"url": "https://www.suse.com/security/cve/CVE-2026-74941"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74941",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74941"
},
{
"cve": "CVE-2026-74942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74942"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74942",
"url": "https://www.suse.com/security/cve/CVE-2026-74942"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74942",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74942"
},
{
"cve": "CVE-2026-74943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74943"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74943",
"url": "https://www.suse.com/security/cve/CVE-2026-74943"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74943",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74943"
},
{
"cve": "CVE-2026-74944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74944"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74944",
"url": "https://www.suse.com/security/cve/CVE-2026-74944"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74944",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74944"
},
{
"cve": "CVE-2026-74945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74945"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74945",
"url": "https://www.suse.com/security/cve/CVE-2026-74945"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74945",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74945"
},
{
"cve": "CVE-2026-74946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74946"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74946",
"url": "https://www.suse.com/security/cve/CVE-2026-74946"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74946",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74946"
},
{
"cve": "CVE-2026-74948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74948"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74948",
"url": "https://www.suse.com/security/cve/CVE-2026-74948"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74948",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74948"
},
{
"cve": "CVE-2026-74949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74949"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74949",
"url": "https://www.suse.com/security/cve/CVE-2026-74949"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74949",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74949"
},
{
"cve": "CVE-2026-74953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74953"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74953",
"url": "https://www.suse.com/security/cve/CVE-2026-74953"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74953",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74953"
},
{
"cve": "CVE-2026-74957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74957"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74957",
"url": "https://www.suse.com/security/cve/CVE-2026-74957"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74957",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74957"
},
{
"cve": "CVE-2026-74959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74959"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74959",
"url": "https://www.suse.com/security/cve/CVE-2026-74959"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74959",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74959"
},
{
"cve": "CVE-2026-74960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74960"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74960",
"url": "https://www.suse.com/security/cve/CVE-2026-74960"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74960",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74960"
},
{
"cve": "CVE-2026-74962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74962"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74962",
"url": "https://www.suse.com/security/cve/CVE-2026-74962"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74962",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74962"
},
{
"cve": "CVE-2026-74963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74963"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74963",
"url": "https://www.suse.com/security/cve/CVE-2026-74963"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74963",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74963"
},
{
"cve": "CVE-2026-74964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74964"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74964",
"url": "https://www.suse.com/security/cve/CVE-2026-74964"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74964",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74964"
},
{
"cve": "CVE-2026-74965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74965"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74965",
"url": "https://www.suse.com/security/cve/CVE-2026-74965"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74965",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74965"
},
{
"cve": "CVE-2026-74967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74967"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74967",
"url": "https://www.suse.com/security/cve/CVE-2026-74967"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74967",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74967"
},
{
"cve": "CVE-2026-74969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74969"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74969",
"url": "https://www.suse.com/security/cve/CVE-2026-74969"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74969",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74969"
},
{
"cve": "CVE-2026-74971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74971"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74971",
"url": "https://www.suse.com/security/cve/CVE-2026-74971"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74971",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74971"
},
{
"cve": "CVE-2026-74972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74972"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74972",
"url": "https://www.suse.com/security/cve/CVE-2026-74972"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74972",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74972"
},
{
"cve": "CVE-2026-74973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74973"
}
],
"notes": [
{
"category": "general",
"text": "Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74973",
"url": "https://www.suse.com/security/cve/CVE-2026-74973"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74973",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74973"
},
{
"cve": "CVE-2026-74974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74974"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74974",
"url": "https://www.suse.com/security/cve/CVE-2026-74974"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74974",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74974"
},
{
"cve": "CVE-2026-74976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74976"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74976",
"url": "https://www.suse.com/security/cve/CVE-2026-74976"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74976",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74976"
},
{
"cve": "CVE-2026-74983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74983"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74983",
"url": "https://www.suse.com/security/cve/CVE-2026-74983"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74983",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74983"
},
{
"cve": "CVE-2026-74987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74987"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74987",
"url": "https://www.suse.com/security/cve/CVE-2026-74987"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74987",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74987"
},
{
"cve": "CVE-2026-74990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74990"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74990",
"url": "https://www.suse.com/security/cve/CVE-2026-74990"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74990",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-branding-upstream-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-devel-140.14.0-160000.1.1.noarch",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-common-140.14.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.s390x",
"openSUSE Leap 16.0:MozillaFirefox-translations-other-140.14.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T13:10:07Z",
"details": "important"
}
],
"title": "CVE-2026-74990"
}
]
}
RHSA-2026:58897
Vulnerability from csaf_redhat - Published: 2026-08-24 10:24 - Updated: 2026-09-08 12:26Summary
Red Hat Security Advisory: firefox security update
Severity
Important
Notes
Topic: An update for firefox is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
* firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)
* firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)
* firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)
* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)
* firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)
* firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)
* firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971)
* firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)
* firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)
* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)
* firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)
* firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)
* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)
* firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)
* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)
* firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)
* firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)
* firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)
* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)
* firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)
* firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)
* firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)
* firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)
* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)
* firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)
* firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)
* firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)
* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944)
* firefox: Integer overflow in the Graphics component (CVE-2026-74964)
* firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)
* firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: CanvasWebGL component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Graphics: CanvasWebGL component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: ImageLib component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the Graphics: Canvas2D component
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Networking: Cookies component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: Cookies component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component
6.1 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component
CWE-733 - Compiler Optimization Removal or Modification of Security-critical CodeAffected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component
CWE-807 - Reliance on Untrusted Inputs in a Security DecisionAffected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
220 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:58897 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517819 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517820 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517822 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517823 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517825 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517826 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517831 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517833 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517834 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517835 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517836 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517837 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517839 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517840 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517841 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517845 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517846 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517849 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517851 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517853 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517856 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517858 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517859 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517860 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517862 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517863 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517866 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517868 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517870 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517872 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517874 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-74934 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517820 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74934 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74934 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74935 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517874 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74935 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74935 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74936 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517840 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74936 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74936 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74939 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517860 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74939 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74939 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74940 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517841 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74940 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74940 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74941 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517833 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74941 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74941 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74942 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517859 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74942 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74942 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74943 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517826 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74943 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74943 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74944 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517868 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74944 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74944 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74945 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517863 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74945 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74945 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74946 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517835 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74946 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74946 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74948 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517825 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74948 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74948 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74949 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517837 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74949 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74949 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74953 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517822 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74953 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74953 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74957 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517856 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74957 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74957 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74959 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517849 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74959 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74959 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74960 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517845 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74960 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74960 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74962 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517872 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74962 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74962 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74963 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517866 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74963 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74963 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74964 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517870 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74964 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74964 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74965 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517834 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74965 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74965 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74967 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517858 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74967 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74967 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74969 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517846 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74969 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74969 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74971 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517831 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74971 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74971 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74972 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517862 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74972 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74972 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74973 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517836 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74973 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74973 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74974 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517853 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74974 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74974 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74976 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517851 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74976 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74976 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74983 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517819 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74983 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74983 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74987 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517823 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74987 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74987 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://access.redhat.com/security/cve/CVE-2026-74990 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2517839 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-74990 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-74990 | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
| https://www.mozilla.org/security/advisories/mfsa2… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983)\n\n* firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934)\n\n* firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953)\n\n* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987)\n\n* firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948)\n\n* firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943)\n\n* firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component (CVE-2026-74971)\n\n* firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941)\n\n* firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965)\n\n* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946)\n\n* firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973)\n\n* firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949)\n\n* firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990)\n\n* firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936)\n\n* firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940)\n\n* firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960)\n\n* firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969)\n\n* firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976)\n\n* firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974)\n\n* firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957)\n\n* firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967)\n\n* firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939)\n\n* firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972)\n\n* firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945)\n\n* firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963)\n\n* firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-74944)\n\n* firefox: Integer overflow in the Graphics component (CVE-2026-74964)\n\n* firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:58897",
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2517819",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517819"
},
{
"category": "external",
"summary": "2517820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517820"
},
{
"category": "external",
"summary": "2517822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517822"
},
{
"category": "external",
"summary": "2517823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517823"
},
{
"category": "external",
"summary": "2517825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517825"
},
{
"category": "external",
"summary": "2517826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517826"
},
{
"category": "external",
"summary": "2517831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517831"
},
{
"category": "external",
"summary": "2517833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517833"
},
{
"category": "external",
"summary": "2517834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517834"
},
{
"category": "external",
"summary": "2517835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517835"
},
{
"category": "external",
"summary": "2517836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517836"
},
{
"category": "external",
"summary": "2517837",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517837"
},
{
"category": "external",
"summary": "2517839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517839"
},
{
"category": "external",
"summary": "2517840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517840"
},
{
"category": "external",
"summary": "2517841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517841"
},
{
"category": "external",
"summary": "2517845",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517845"
},
{
"category": "external",
"summary": "2517846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517846"
},
{
"category": "external",
"summary": "2517849",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517849"
},
{
"category": "external",
"summary": "2517851",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517851"
},
{
"category": "external",
"summary": "2517853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517853"
},
{
"category": "external",
"summary": "2517856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517856"
},
{
"category": "external",
"summary": "2517858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517858"
},
{
"category": "external",
"summary": "2517859",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517859"
},
{
"category": "external",
"summary": "2517860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517860"
},
{
"category": "external",
"summary": "2517862",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517862"
},
{
"category": "external",
"summary": "2517863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517863"
},
{
"category": "external",
"summary": "2517866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517866"
},
{
"category": "external",
"summary": "2517868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517868"
},
{
"category": "external",
"summary": "2517870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517870"
},
{
"category": "external",
"summary": "2517872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517872"
},
{
"category": "external",
"summary": "2517874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517874"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58897.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2026-09-08T12:26:13+00:00",
"generator": {
"date": "2026-09-08T12:26:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:58897",
"initial_release_date": "2026-08-24T10:24:17+00:00",
"revision_history": [
{
"date": "2026-08-24T10:24:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-24T10:24:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-08T12:26:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:140.14.0-1.el9_8.src",
"product": {
"name": "firefox-0:140.14.0-1.el9_8.src",
"product_id": "firefox-0:140.14.0-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@140.14.0-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:140.14.0-1.el9_8.aarch64",
"product": {
"name": "firefox-0:140.14.0-1.el9_8.aarch64",
"product_id": "firefox-0:140.14.0-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@140.14.0-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-x11-0:140.14.0-1.el9_8.aarch64",
"product": {
"name": "firefox-x11-0:140.14.0-1.el9_8.aarch64",
"product_id": "firefox-x11-0:140.14.0-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-x11@140.14.0-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"product": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"product_id": "firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@140.14.0-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"product": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"product_id": "firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@140.14.0-1.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:140.14.0-1.el9_8.x86_64",
"product": {
"name": "firefox-0:140.14.0-1.el9_8.x86_64",
"product_id": "firefox-0:140.14.0-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@140.14.0-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-x11-0:140.14.0-1.el9_8.x86_64",
"product": {
"name": "firefox-x11-0:140.14.0-1.el9_8.x86_64",
"product_id": "firefox-x11-0:140.14.0-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-x11@140.14.0-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"product": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"product_id": "firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@140.14.0-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"product": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"product_id": "firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@140.14.0-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:140.14.0-1.el9_8.ppc64le",
"product": {
"name": "firefox-0:140.14.0-1.el9_8.ppc64le",
"product_id": "firefox-0:140.14.0-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@140.14.0-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"product": {
"name": "firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"product_id": "firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-x11@140.14.0-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"product": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"product_id": "firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@140.14.0-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"product": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"product_id": "firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@140.14.0-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:140.14.0-1.el9_8.s390x",
"product": {
"name": "firefox-0:140.14.0-1.el9_8.s390x",
"product_id": "firefox-0:140.14.0-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@140.14.0-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-x11-0:140.14.0-1.el9_8.s390x",
"product": {
"name": "firefox-x11-0:140.14.0-1.el9_8.s390x",
"product_id": "firefox-x11-0:140.14.0-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-x11@140.14.0-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"product": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"product_id": "firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@140.14.0-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"product": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"product_id": "firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@140.14.0-1.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:140.14.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64"
},
"product_reference": "firefox-0:140.14.0-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:140.14.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le"
},
"product_reference": "firefox-0:140.14.0-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:140.14.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x"
},
"product_reference": "firefox-0:140.14.0-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:140.14.0-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src"
},
"product_reference": "firefox-0:140.14.0-1.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:140.14.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64"
},
"product_reference": "firefox-0:140.14.0-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64"
},
"product_reference": "firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le"
},
"product_reference": "firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x"
},
"product_reference": "firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:140.14.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64"
},
"product_reference": "firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64"
},
"product_reference": "firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le"
},
"product_reference": "firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x"
},
"product_reference": "firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:140.14.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64"
},
"product_reference": "firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-x11-0:140.14.0-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64"
},
"product_reference": "firefox-x11-0:140.14.0-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-x11-0:140.14.0-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le"
},
"product_reference": "firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-x11-0:140.14.0-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x"
},
"product_reference": "firefox-x11-0:140.14.0-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-x11-0:140.14.0-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
},
"product_reference": "firefox-x11-0:140.14.0-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-74934",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-08-18T12:41:18.553257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the Graphics: CanvasWebGL component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74934"
},
{
"category": "external",
"summary": "RHBZ#2517820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74934"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74934",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74934"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74934",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74934"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74934",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74934"
}
],
"release_date": "2026-08-18T12:23:27.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component"
},
{
"cve": "CVE-2026-74935",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-18T12:50:08.152782+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the DOM: Networking component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the DOM: Networking component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74935"
},
{
"category": "external",
"summary": "RHBZ#2517874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74935"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74935",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74935"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74935",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74935"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74935",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74935"
}
],
"release_date": "2026-08-18T12:23:27.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation in the DOM: Networking component"
},
{
"cve": "CVE-2026-74936",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:44:12.493679+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the JavaScript: WebAssembly component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74936"
},
{
"category": "external",
"summary": "RHBZ#2517840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74936"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74936",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74936"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74936",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74936"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74936",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74936"
}
],
"release_date": "2026-08-18T12:23:27.882000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component"
},
{
"cve": "CVE-2026-74939",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-18T12:47:41.333438+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517860"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the DOM: Navigation component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the DOM: Navigation component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74939"
},
{
"category": "external",
"summary": "RHBZ#2517860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74939"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74939",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74939"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74939",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74939"
}
],
"release_date": "2026-08-18T12:23:28.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation in the DOM: Navigation component"
},
{
"cve": "CVE-2026-74940",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:44:22.423095+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517841"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: Text component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: Text component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74940"
},
{
"category": "external",
"summary": "RHBZ#2517841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517841"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74940"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74940",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74940"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74940",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74940"
}
],
"release_date": "2026-08-18T12:23:28.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: Text component"
},
{
"cve": "CVE-2026-74941",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-18T12:43:24.972764+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the Graphics: CanvasWebGL component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74941"
},
{
"category": "external",
"summary": "RHBZ#2517833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74941"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74941",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74941"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74941",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74941"
}
],
"release_date": "2026-08-18T12:23:28.747000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component"
},
{
"cve": "CVE-2026-74942",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-18T12:47:29.930927+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517859"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the Remote Settings Client component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: Privilege escalation in the Remote Settings Client component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74942"
},
{
"category": "external",
"summary": "RHBZ#2517859",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517859"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74942"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74942",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74942"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74942",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74942"
}
],
"release_date": "2026-08-18T12:23:29.044000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: Privilege escalation in the Remote Settings Client component"
},
{
"cve": "CVE-2026-74943",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:42:40.542639+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Graphics: ImageLib component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Graphics: ImageLib component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74943"
},
{
"category": "external",
"summary": "RHBZ#2517826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74943"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74943",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74943"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74943",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74943"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74943",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74943"
}
],
"release_date": "2026-08-18T12:23:29.309000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the Graphics: ImageLib component"
},
{
"cve": "CVE-2026-74944",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:49:22.680083+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517868"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74944"
},
{
"category": "external",
"summary": "RHBZ#2517868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517868"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74944"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74944",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74944"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74944",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74944"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74944",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74944"
}
],
"release_date": "2026-08-18T12:23:29.582000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component"
},
{
"cve": "CVE-2026-74945",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-08-18T12:48:22.342907+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517863"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Graphics: Text component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Graphics: Text component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74945"
},
{
"category": "external",
"summary": "RHBZ#2517863",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517863"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74945"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74945",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74945"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74945",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74945"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74945",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74945"
}
],
"release_date": "2026-08-18T12:23:29.811000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Information disclosure in the Graphics: Text component"
},
{
"cve": "CVE-2026-74946",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-18T12:43:42.980734+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517835"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74946"
},
{
"category": "external",
"summary": "RHBZ#2517835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74946"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74946",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74946"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74946",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74946"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74946",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74946"
}
],
"release_date": "2026-08-18T12:23:30.090000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component"
},
{
"cve": "CVE-2026-74948",
"cwe": {
"id": "CWE-497",
"name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
},
"discovery_date": "2026-08-18T12:42:04.113841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the Graphics component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the Graphics component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74948"
},
{
"category": "external",
"summary": "RHBZ#2517825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74948"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74948",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74948"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74948",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74948"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74948",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74948"
}
],
"release_date": "2026-08-18T12:23:30.321000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Information disclosure in the Graphics component"
},
{
"cve": "CVE-2026-74949",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-18T12:43:07.101263+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517837"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation due to use-after-free in the Graphics: Canvas2D component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74949"
},
{
"category": "external",
"summary": "RHBZ#2517837",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517837"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74949"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74949",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74949"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74949",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74949"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74949",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74949"
}
],
"release_date": "2026-08-18T12:23:30.578000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component"
},
{
"cve": "CVE-2026-74953",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-08-18T12:41:36.495351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the Networking: Cookies component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Privilege escalation in the Networking: Cookies component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74953"
},
{
"category": "external",
"summary": "RHBZ#2517822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74953"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74953",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74953"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74953",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74953"
}
],
"release_date": "2026-08-18T12:23:30.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Privilege escalation in the Networking: Cookies component"
},
{
"cve": "CVE-2026-74957",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-08-18T12:47:04.723926+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the Safe Browsing component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the Safe Browsing component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74957"
},
{
"category": "external",
"summary": "RHBZ#2517856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74957"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74957",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74957"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74957",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74957"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74957",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74957"
}
],
"release_date": "2026-08-18T12:23:31.078000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the Safe Browsing component"
},
{
"cve": "CVE-2026-74959",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-08-18T12:46:06.700074+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517849"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the Storage: Cache API component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the Storage: Cache API component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74959"
},
{
"category": "external",
"summary": "RHBZ#2517849",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517849"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74959"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74959",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74959"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74959",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74959"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74959",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74959"
}
],
"release_date": "2026-08-18T12:23:31.322000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the Storage: Cache API component"
},
{
"cve": "CVE-2026-74960",
"cwe": {
"id": "CWE-501",
"name": "Trust Boundary Violation"
},
"discovery_date": "2026-08-18T12:45:17.340977+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517845"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the WebExtensions component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Site isolation issue in the WebExtensions component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74960"
},
{
"category": "external",
"summary": "RHBZ#2517845",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517845"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74960"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74960",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74960"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74960",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74960"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74960",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74960"
}
],
"release_date": "2026-08-18T12:23:31.590000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Site isolation issue in the WebExtensions component"
},
{
"cve": "CVE-2026-74962",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-08-18T12:49:33.392848+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSite isolation issue in the Networking: Cookies component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: Site isolation issue in the Networking: Cookies component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74962"
},
{
"category": "external",
"summary": "RHBZ#2517872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74962"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74962",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74962"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74962",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74962"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74962",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74962"
}
],
"release_date": "2026-08-18T12:23:31.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: Site isolation issue in the Networking: Cookies component"
},
{
"cve": "CVE-2026-74963",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-08-18T12:49:02.047728+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517866"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass in the Networking: Cookies component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74963"
},
{
"category": "external",
"summary": "RHBZ#2517866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517866"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74963"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74963",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74963"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74963",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74963"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74963",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74963"
}
],
"release_date": "2026-08-18T12:23:32.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component"
},
{
"cve": "CVE-2026-74964",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-18T12:49:14.042814+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517870"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInteger overflow in the Graphics component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: Integer overflow in the Graphics component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74964"
},
{
"category": "external",
"summary": "RHBZ#2517870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517870"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74964"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74964"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74964",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74964"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74964",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74964"
}
],
"release_date": "2026-08-18T12:23:32.369000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: Integer overflow in the Graphics component"
},
{
"cve": "CVE-2026-74965",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-18T12:43:33.483406+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517834"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nPrivilege escalation in the Shell Integration component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: Privilege escalation in the Shell Integration component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74965"
},
{
"category": "external",
"summary": "RHBZ#2517834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517834"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74965"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74965",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74965"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74965",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74965"
}
],
"release_date": "2026-08-18T12:23:32.613000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: Privilege escalation in the Shell Integration component"
},
{
"cve": "CVE-2026-74967",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-08-18T12:47:21.242874+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517858"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass in the Audio/Video: Playback component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74967"
},
{
"category": "external",
"summary": "RHBZ#2517858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74967"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74967",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74967"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74967",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74967"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74967",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74967"
}
],
"release_date": "2026-08-18T12:23:32.866000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component"
},
{
"cve": "CVE-2026-74969",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:45:30.438913+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nUse-after-free in the Layout: Text and Fonts component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74969"
},
{
"category": "external",
"summary": "RHBZ#2517846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74969"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74969",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74969"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74969",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74969"
}
],
"release_date": "2026-08-18T12:23:33.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component"
},
{
"cve": "CVE-2026-74971",
"cwe": {
"id": "CWE-360",
"name": "Trust of System Event Data"
},
"discovery_date": "2026-08-18T12:42:32.337455+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517831"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the DOM: UI Events \u0026 Focus Handling component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74971"
},
{
"category": "external",
"summary": "RHBZ#2517831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517831"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74971"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74971",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74971"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74971",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74971"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74971",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74971"
}
],
"release_date": "2026-08-18T12:23:33.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Information disclosure in the DOM: UI Events \u0026 Focus Handling component"
},
{
"cve": "CVE-2026-74972",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-08-18T12:48:00.295910+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517862"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInformation disclosure in the DOM: Push Subscriptions component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74972"
},
{
"category": "external",
"summary": "RHBZ#2517862",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517862"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74972"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74972",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74972"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74972",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74972"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74972",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74972"
}
],
"release_date": "2026-08-18T12:23:33.635000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component"
},
{
"cve": "CVE-2026-74973",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-18T12:43:52.150968+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517836"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nRace condition, use-after-free in the Graphics component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: Race condition, use-after-free in the Graphics component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74973"
},
{
"category": "external",
"summary": "RHBZ#2517836",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517836"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74973"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74973",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74973"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74973",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74973"
}
],
"release_date": "2026-08-18T12:23:33.845000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: Race condition, use-after-free in the Graphics component"
},
{
"cve": "CVE-2026-74974",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-08-18T12:46:19.042707+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nSame-origin policy bypass in the Graphics: ImageLib component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74974"
},
{
"category": "external",
"summary": "RHBZ#2517853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74974"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74974",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74974"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74974",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74974"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74974",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74974"
}
],
"release_date": "2026-08-18T12:23:34.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component"
},
{
"cve": "CVE-2026-74976",
"cwe": {
"id": "CWE-733",
"name": "Compiler Optimization Removal or Modification of Security-critical Code"
},
"discovery_date": "2026-08-18T12:46:28.364431+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517851"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nJIT miscompilation in the JavaScript Engine: JIT component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74976"
},
{
"category": "external",
"summary": "RHBZ#2517851",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517851"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74976"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74976",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74976"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74976",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74976"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74976",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74976"
}
],
"release_date": "2026-08-18T12:23:34.327000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component"
},
{
"cve": "CVE-2026-74983",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-08-18T12:41:07.307882+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517819"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMitigation bypass in the Data Loss Prevention component",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74983"
},
{
"category": "external",
"summary": "RHBZ#2517819",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517819"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74983"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74983",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74983"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74983",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74983"
}
],
"release_date": "2026-08-18T12:23:34.590000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component"
},
{
"cve": "CVE-2026-74987",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-18T12:41:46.290292+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInternally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74987"
},
{
"category": "external",
"summary": "RHBZ#2517823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74987"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74987",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74987"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74987",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74987"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74987",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74987"
}
],
"release_date": "2026-08-18T12:23:34.847000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154"
},
{
"cve": "CVE-2026-74990",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-18T12:44:32.073144+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nInternally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74990"
},
{
"category": "external",
"summary": "RHBZ#2517839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74990"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74990",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-76/#CVE-2026-74990"
},
{
"category": "external",
"summary": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74990",
"url": "https://www.mozilla.org/security/advisories/mfsa2026-79/#CVE-2026-74990"
}
],
"release_date": "2026-08-18T12:23:35.129000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T10:24:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:58897"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debuginfo-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-debugsource-0:140.14.0-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:firefox-x11-0:140.14.0-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…