Vulnerability-Lookup

OPENSUSE-SU-2026:11373-1

Vulnerability from csaf_opensuse - Published: 2026-07-25 00:00 - Updated: 2026-09-19 15:43

Summary

firefox-esr-153.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: firefox-esr-153.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11373

CVE-2024-10468

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-0:153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-branding-upstream-0:153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-common-0:153.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:firefox-esr-translations-other-0:153.0-1.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2024-11700

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11701

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11702

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11703

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11705

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11706

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-11708

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2024-7523

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-7530

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-8388

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2024-8389

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9391

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9395

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9403

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9936

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2024-9956

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0244

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0245

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0246

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-0247

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-1018

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-1019

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2025-1020

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-10530

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10531

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10534

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-10535

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11152

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11153

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-11716

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11717

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11718

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11719

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11720

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-11721

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-12380

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13012

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13013

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13014

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13015

3.4 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13016

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13017

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13018

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13019

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13020

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13021

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13022

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13023

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13024

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13025

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13026

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-13027

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14326

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14332

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-14860

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-14861

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1939

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1940

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1941

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1942

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-1943

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-3031

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3032

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3033

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3034

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3035

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-3608

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4082

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4083

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4085

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4086

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4087

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4088

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4089

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4090

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4091

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-4092

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-49709

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-49710

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5270

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5271

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-5272

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-8041

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2025-8042

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2025-8043

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-8044

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-9186

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2025-9187

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0881

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0888

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0889

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-0892

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-10701

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact moderate

CVE-2026-10702

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-12293

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12300

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12301

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12303

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12316

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12317

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12318

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12319

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12320

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12321

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12322

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12323

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-12326

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-14241

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-16364

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16365

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16366

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16367

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16370

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16372

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16373

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16376

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16378

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16380

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16382

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16384

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16385

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16386

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16388

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16389

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16392

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16393

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16394

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16395

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16397

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16398

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16399

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16400

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16401

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16402

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16403

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16404

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16406

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16407

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16408

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16409

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16410

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-16411

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-24868

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-24869

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2794

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2795

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2796

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2797

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2798

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2799

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2800

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2801

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2802

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2803

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2804

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2805

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2806

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-2807

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-3846

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-3847

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4722

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4723

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4724

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4725

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4726

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4727

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4728

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-4729

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-5733

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-5735

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-6746

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6747

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6748

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6749

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6750

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6751

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6752

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6753

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6754

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6755

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6756

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6757

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6758

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6759

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6760

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6761

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6762

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6763

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6764

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6765

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6766

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6767

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6768

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6769

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6770

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6771

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6772

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6773

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6774

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6775

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6776

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6777

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6778

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6779

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6780

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6781

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6782

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6783

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6784

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6785

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-6786

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-7324

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact critical

CVE-2026-8093

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8945

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8948

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8951

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8952

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8960

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8963

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8964

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8965

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8966

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8967

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8969

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8971

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8972

6.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

CVE-2026-8973

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2024-10468

Threats

Impact important

References

682 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2024-10468/	self
https://www.suse.com/security/cve/CVE-2024-11700/	self
https://www.suse.com/security/cve/CVE-2024-11701/	self
https://www.suse.com/security/cve/CVE-2024-11702/	self
https://www.suse.com/security/cve/CVE-2024-11703/	self
https://www.suse.com/security/cve/CVE-2024-11705/	self
https://www.suse.com/security/cve/CVE-2024-11706/	self
https://www.suse.com/security/cve/CVE-2024-11708/	self
https://www.suse.com/security/cve/CVE-2024-7523/	self
https://www.suse.com/security/cve/CVE-2024-7530/	self
https://www.suse.com/security/cve/CVE-2024-8388/	self
https://www.suse.com/security/cve/CVE-2024-8389/	self
https://www.suse.com/security/cve/CVE-2024-9391/	self
https://www.suse.com/security/cve/CVE-2024-9395/	self
https://www.suse.com/security/cve/CVE-2024-9403/	self
https://www.suse.com/security/cve/CVE-2024-9936/	self
https://www.suse.com/security/cve/CVE-2024-9956/	self
https://www.suse.com/security/cve/CVE-2025-0244/	self
https://www.suse.com/security/cve/CVE-2025-0245/	self
https://www.suse.com/security/cve/CVE-2025-0246/	self
https://www.suse.com/security/cve/CVE-2025-0247/	self
https://www.suse.com/security/cve/CVE-2025-1018/	self
https://www.suse.com/security/cve/CVE-2025-1019/	self
https://www.suse.com/security/cve/CVE-2025-1020/	self
https://www.suse.com/security/cve/CVE-2025-10530/	self
https://www.suse.com/security/cve/CVE-2025-10531/	self
https://www.suse.com/security/cve/CVE-2025-10534/	self
https://www.suse.com/security/cve/CVE-2025-10535/	self
https://www.suse.com/security/cve/CVE-2025-11152/	self
https://www.suse.com/security/cve/CVE-2025-11153/	self
https://www.suse.com/security/cve/CVE-2025-11716/	self
https://www.suse.com/security/cve/CVE-2025-11717/	self
https://www.suse.com/security/cve/CVE-2025-11718/	self
https://www.suse.com/security/cve/CVE-2025-11719/	self
https://www.suse.com/security/cve/CVE-2025-11720/	self
https://www.suse.com/security/cve/CVE-2025-11721/	self
https://www.suse.com/security/cve/CVE-2025-12380/	self
https://www.suse.com/security/cve/CVE-2025-13012/	self
https://www.suse.com/security/cve/CVE-2025-13013/	self
https://www.suse.com/security/cve/CVE-2025-13014/	self
https://www.suse.com/security/cve/CVE-2025-13015/	self
https://www.suse.com/security/cve/CVE-2025-13016/	self
https://www.suse.com/security/cve/CVE-2025-13017/	self
https://www.suse.com/security/cve/CVE-2025-13018/	self
https://www.suse.com/security/cve/CVE-2025-13019/	self
https://www.suse.com/security/cve/CVE-2025-13020/	self
https://www.suse.com/security/cve/CVE-2025-13021/	self
https://www.suse.com/security/cve/CVE-2025-13022/	self
https://www.suse.com/security/cve/CVE-2025-13023/	self
https://www.suse.com/security/cve/CVE-2025-13024/	self
https://www.suse.com/security/cve/CVE-2025-13025/	self
https://www.suse.com/security/cve/CVE-2025-13026/	self
https://www.suse.com/security/cve/CVE-2025-13027/	self
https://www.suse.com/security/cve/CVE-2025-14326/	self
https://www.suse.com/security/cve/CVE-2025-14332/	self
https://www.suse.com/security/cve/CVE-2025-14860/	self
https://www.suse.com/security/cve/CVE-2025-14861/	self
https://www.suse.com/security/cve/CVE-2025-1939/	self
https://www.suse.com/security/cve/CVE-2025-1940/	self
https://www.suse.com/security/cve/CVE-2025-1941/	self
https://www.suse.com/security/cve/CVE-2025-1942/	self
https://www.suse.com/security/cve/CVE-2025-1943/	self
https://www.suse.com/security/cve/CVE-2025-3031/	self
https://www.suse.com/security/cve/CVE-2025-3032/	self
https://www.suse.com/security/cve/CVE-2025-3033/	self
https://www.suse.com/security/cve/CVE-2025-3034/	self
https://www.suse.com/security/cve/CVE-2025-3035/	self
https://www.suse.com/security/cve/CVE-2025-3608/	self
https://www.suse.com/security/cve/CVE-2025-4082/	self
https://www.suse.com/security/cve/CVE-2025-4083/	self
https://www.suse.com/security/cve/CVE-2025-4085/	self
https://www.suse.com/security/cve/CVE-2025-4086/	self
https://www.suse.com/security/cve/CVE-2025-4087/	self
https://www.suse.com/security/cve/CVE-2025-4088/	self
https://www.suse.com/security/cve/CVE-2025-4089/	self
https://www.suse.com/security/cve/CVE-2025-4090/	self
https://www.suse.com/security/cve/CVE-2025-4091/	self
https://www.suse.com/security/cve/CVE-2025-4092/	self
https://www.suse.com/security/cve/CVE-2025-49709/	self
https://www.suse.com/security/cve/CVE-2025-49710/	self
https://www.suse.com/security/cve/CVE-2025-5270/	self
https://www.suse.com/security/cve/CVE-2025-5271/	self
https://www.suse.com/security/cve/CVE-2025-5272/	self
https://www.suse.com/security/cve/CVE-2025-8041/	self
https://www.suse.com/security/cve/CVE-2025-8042/	self
https://www.suse.com/security/cve/CVE-2025-8043/	self
https://www.suse.com/security/cve/CVE-2025-8044/	self
https://www.suse.com/security/cve/CVE-2025-9186/	self
https://www.suse.com/security/cve/CVE-2025-9187/	self
https://www.suse.com/security/cve/CVE-2026-0881/	self
https://www.suse.com/security/cve/CVE-2026-0888/	self
https://www.suse.com/security/cve/CVE-2026-0889/	self
https://www.suse.com/security/cve/CVE-2026-0892/	self
https://www.suse.com/security/cve/CVE-2026-10701/	self
https://www.suse.com/security/cve/CVE-2026-10702/	self
https://www.suse.com/security/cve/CVE-2026-12293/	self
https://www.suse.com/security/cve/CVE-2026-12300/	self
https://www.suse.com/security/cve/CVE-2026-12301/	self
https://www.suse.com/security/cve/CVE-2026-12303/	self
https://www.suse.com/security/cve/CVE-2026-12316/	self
https://www.suse.com/security/cve/CVE-2026-12317/	self
https://www.suse.com/security/cve/CVE-2026-12318/	self
https://www.suse.com/security/cve/CVE-2026-12319/	self
https://www.suse.com/security/cve/CVE-2026-12320/	self
https://www.suse.com/security/cve/CVE-2026-12321/	self
https://www.suse.com/security/cve/CVE-2026-12322/	self
https://www.suse.com/security/cve/CVE-2026-12323/	self
https://www.suse.com/security/cve/CVE-2026-12326/	self
https://www.suse.com/security/cve/CVE-2026-14241/	self
https://www.suse.com/security/cve/CVE-2026-16364/	self
https://www.suse.com/security/cve/CVE-2026-16365/	self
https://www.suse.com/security/cve/CVE-2026-16366/	self
https://www.suse.com/security/cve/CVE-2026-16367/	self
https://www.suse.com/security/cve/CVE-2026-16370/	self
https://www.suse.com/security/cve/CVE-2026-16372/	self
https://www.suse.com/security/cve/CVE-2026-16373/	self
https://www.suse.com/security/cve/CVE-2026-16376/	self
https://www.suse.com/security/cve/CVE-2026-16378/	self
https://www.suse.com/security/cve/CVE-2026-16380/	self
https://www.suse.com/security/cve/CVE-2026-16382/	self
https://www.suse.com/security/cve/CVE-2026-16384/	self
https://www.suse.com/security/cve/CVE-2026-16385/	self
https://www.suse.com/security/cve/CVE-2026-16386/	self
https://www.suse.com/security/cve/CVE-2026-16388/	self
https://www.suse.com/security/cve/CVE-2026-16389/	self
https://www.suse.com/security/cve/CVE-2026-16392/	self
https://www.suse.com/security/cve/CVE-2026-16393/	self
https://www.suse.com/security/cve/CVE-2026-16394/	self
https://www.suse.com/security/cve/CVE-2026-16395/	self
https://www.suse.com/security/cve/CVE-2026-16397/	self
https://www.suse.com/security/cve/CVE-2026-16398/	self
https://www.suse.com/security/cve/CVE-2026-16399/	self
https://www.suse.com/security/cve/CVE-2026-16400/	self
https://www.suse.com/security/cve/CVE-2026-16401/	self
https://www.suse.com/security/cve/CVE-2026-16402/	self
https://www.suse.com/security/cve/CVE-2026-16403/	self
https://www.suse.com/security/cve/CVE-2026-16404/	self
https://www.suse.com/security/cve/CVE-2026-16406/	self
https://www.suse.com/security/cve/CVE-2026-16407/	self
https://www.suse.com/security/cve/CVE-2026-16408/	self
https://www.suse.com/security/cve/CVE-2026-16409/	self
https://www.suse.com/security/cve/CVE-2026-16410/	self
https://www.suse.com/security/cve/CVE-2026-16411/	self
https://www.suse.com/security/cve/CVE-2026-24868/	self
https://www.suse.com/security/cve/CVE-2026-24869/	self
https://www.suse.com/security/cve/CVE-2026-2794/	self
https://www.suse.com/security/cve/CVE-2026-2795/	self
https://www.suse.com/security/cve/CVE-2026-2796/	self
https://www.suse.com/security/cve/CVE-2026-2797/	self
https://www.suse.com/security/cve/CVE-2026-2798/	self
https://www.suse.com/security/cve/CVE-2026-2799/	self
https://www.suse.com/security/cve/CVE-2026-2800/	self
https://www.suse.com/security/cve/CVE-2026-2801/	self
https://www.suse.com/security/cve/CVE-2026-2802/	self
https://www.suse.com/security/cve/CVE-2026-2803/	self
https://www.suse.com/security/cve/CVE-2026-2804/	self
https://www.suse.com/security/cve/CVE-2026-2805/	self
https://www.suse.com/security/cve/CVE-2026-2806/	self
https://www.suse.com/security/cve/CVE-2026-2807/	self
https://www.suse.com/security/cve/CVE-2026-3846/	self
https://www.suse.com/security/cve/CVE-2026-3847/	self
https://www.suse.com/security/cve/CVE-2026-4722/	self
https://www.suse.com/security/cve/CVE-2026-4723/	self
https://www.suse.com/security/cve/CVE-2026-4724/	self
https://www.suse.com/security/cve/CVE-2026-4725/	self
https://www.suse.com/security/cve/CVE-2026-4726/	self
https://www.suse.com/security/cve/CVE-2026-4727/	self
https://www.suse.com/security/cve/CVE-2026-4728/	self
https://www.suse.com/security/cve/CVE-2026-4729/	self
https://www.suse.com/security/cve/CVE-2026-5733/	self
https://www.suse.com/security/cve/CVE-2026-5735/	self
https://www.suse.com/security/cve/CVE-2026-6746/	self
https://www.suse.com/security/cve/CVE-2026-6747/	self
https://www.suse.com/security/cve/CVE-2026-6748/	self
https://www.suse.com/security/cve/CVE-2026-6749/	self
https://www.suse.com/security/cve/CVE-2026-6750/	self
https://www.suse.com/security/cve/CVE-2026-6751/	self
https://www.suse.com/security/cve/CVE-2026-6752/	self
https://www.suse.com/security/cve/CVE-2026-6753/	self
https://www.suse.com/security/cve/CVE-2026-6754/	self
https://www.suse.com/security/cve/CVE-2026-6755/	self
https://www.suse.com/security/cve/CVE-2026-6756/	self
https://www.suse.com/security/cve/CVE-2026-6757/	self
https://www.suse.com/security/cve/CVE-2026-6758/	self
https://www.suse.com/security/cve/CVE-2026-6759/	self
https://www.suse.com/security/cve/CVE-2026-6760/	self
https://www.suse.com/security/cve/CVE-2026-6761/	self
https://www.suse.com/security/cve/CVE-2026-6762/	self
https://www.suse.com/security/cve/CVE-2026-6763/	self
https://www.suse.com/security/cve/CVE-2026-6764/	self
https://www.suse.com/security/cve/CVE-2026-6765/	self
https://www.suse.com/security/cve/CVE-2026-6766/	self
https://www.suse.com/security/cve/CVE-2026-6767/	self
https://www.suse.com/security/cve/CVE-2026-6768/	self
https://www.suse.com/security/cve/CVE-2026-6769/	self
https://www.suse.com/security/cve/CVE-2026-6770/	self
https://www.suse.com/security/cve/CVE-2026-6771/	self
https://www.suse.com/security/cve/CVE-2026-6772/	self
https://www.suse.com/security/cve/CVE-2026-6773/	self
https://www.suse.com/security/cve/CVE-2026-6774/	self
https://www.suse.com/security/cve/CVE-2026-6775/	self
https://www.suse.com/security/cve/CVE-2026-6776/	self
https://www.suse.com/security/cve/CVE-2026-6777/	self
https://www.suse.com/security/cve/CVE-2026-6778/	self
https://www.suse.com/security/cve/CVE-2026-6779/	self
https://www.suse.com/security/cve/CVE-2026-6780/	self
https://www.suse.com/security/cve/CVE-2026-6781/	self
https://www.suse.com/security/cve/CVE-2026-6782/	self
https://www.suse.com/security/cve/CVE-2026-6783/	self
https://www.suse.com/security/cve/CVE-2026-6784/	self
https://www.suse.com/security/cve/CVE-2026-6785/	self
https://www.suse.com/security/cve/CVE-2026-6786/	self
https://www.suse.com/security/cve/CVE-2026-7324/	self
https://www.suse.com/security/cve/CVE-2026-8093/	self
https://www.suse.com/security/cve/CVE-2026-8945/	self
https://www.suse.com/security/cve/CVE-2026-8948/	self
https://www.suse.com/security/cve/CVE-2026-8951/	self
https://www.suse.com/security/cve/CVE-2026-8952/	self
https://www.suse.com/security/cve/CVE-2026-8960/	self
https://www.suse.com/security/cve/CVE-2026-8963/	self
https://www.suse.com/security/cve/CVE-2026-8964/	self
https://www.suse.com/security/cve/CVE-2026-8965/	self
https://www.suse.com/security/cve/CVE-2026-8966/	self
https://www.suse.com/security/cve/CVE-2026-8967/	self
https://www.suse.com/security/cve/CVE-2026-8969/	self
https://www.suse.com/security/cve/CVE-2026-8971/	self
https://www.suse.com/security/cve/CVE-2026-8972/	self
https://www.suse.com/security/cve/CVE-2026-8973/	self
https://www.suse.com/security/cve/CVE-2024-10468	external
https://bugzilla.suse.com/1231879	external
https://www.suse.com/security/cve/CVE-2024-11700	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11701	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11702	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11703	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11705	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11706	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-11708	external
https://bugzilla.suse.com/1233695	external
https://www.suse.com/security/cve/CVE-2024-7523	external
https://bugzilla.suse.com/1228648	external
https://www.suse.com/security/cve/CVE-2024-7530	external
https://bugzilla.suse.com/1228648	external
https://www.suse.com/security/cve/CVE-2024-8388	external
https://www.suse.com/security/cve/CVE-2024-8389	external
https://bugzilla.suse.com/1229821	external
https://www.suse.com/security/cve/CVE-2024-9391	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9395	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9403	external
https://bugzilla.suse.com/1230979	external
https://www.suse.com/security/cve/CVE-2024-9936	external
https://bugzilla.suse.com/1231641	external
https://www.suse.com/security/cve/CVE-2024-9956	external
https://bugzilla.suse.com/1231694	external
https://www.suse.com/security/cve/CVE-2025-0244	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0245	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0246	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-0247	external
https://bugzilla.suse.com/1234991	external
https://www.suse.com/security/cve/CVE-2025-1018	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-1019	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-1020	external
https://bugzilla.suse.com/1236539	external
https://www.suse.com/security/cve/CVE-2025-10530	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10531	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10534	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-10535	external
https://bugzilla.suse.com/1249391	external
https://www.suse.com/security/cve/CVE-2025-11152	external
https://bugzilla.suse.com/1250678	external
https://www.suse.com/security/cve/CVE-2025-11153	external
https://bugzilla.suse.com/1250678	external
https://www.suse.com/security/cve/CVE-2025-11716	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11717	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11718	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11719	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11720	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-11721	external
https://bugzilla.suse.com/1251263	external
https://www.suse.com/security/cve/CVE-2025-12380	external
https://bugzilla.suse.com/1252815	external
https://www.suse.com/security/cve/CVE-2025-13012	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13013	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13014	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13015	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13016	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13017	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13018	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13019	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13020	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13021	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13022	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13023	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13024	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13025	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13026	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-13027	external
https://bugzilla.suse.com/1253188	external
https://www.suse.com/security/cve/CVE-2025-14326	external
https://bugzilla.suse.com/1254551	external
https://www.suse.com/security/cve/CVE-2025-14332	external
https://bugzilla.suse.com/1254551	external
https://www.suse.com/security/cve/CVE-2025-14860	external
https://bugzilla.suse.com/1255367	external
https://www.suse.com/security/cve/CVE-2025-14861	external
https://bugzilla.suse.com/1255367	external
https://www.suse.com/security/cve/CVE-2025-1939	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1940	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1941	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1942	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-1943	external
https://bugzilla.suse.com/1238886	external
https://www.suse.com/security/cve/CVE-2025-3031	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3032	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3033	external
https://www.suse.com/security/cve/CVE-2025-3034	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3035	external
https://bugzilla.suse.com/1240083	external
https://www.suse.com/security/cve/CVE-2025-3608	external
https://bugzilla.suse.com/1241277	external
https://www.suse.com/security/cve/CVE-2025-4082	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4083	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4085	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4086	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4087	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4088	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4089	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4090	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4091	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-4092	external
https://bugzilla.suse.com/1241621	external
https://www.suse.com/security/cve/CVE-2025-49709	external
https://bugzilla.suse.com/1244468	external
https://www.suse.com/security/cve/CVE-2025-49710	external
https://bugzilla.suse.com/1244468	external
https://www.suse.com/security/cve/CVE-2025-5270	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-5271	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-5272	external
https://bugzilla.suse.com/1243353	external
https://www.suse.com/security/cve/CVE-2025-8041	external
https://www.suse.com/security/cve/CVE-2025-8042	external
https://www.suse.com/security/cve/CVE-2025-8043	external
https://bugzilla.suse.com/1246664	external
https://www.suse.com/security/cve/CVE-2025-8044	external
https://bugzilla.suse.com/1246664	external
https://www.suse.com/security/cve/CVE-2025-9186	external
https://bugzilla.suse.com/1248162	external
https://www.suse.com/security/cve/CVE-2025-9187	external
https://bugzilla.suse.com/1248162	external
https://www.suse.com/security/cve/CVE-2026-0881	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0888	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0889	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-0892	external
https://bugzilla.suse.com/1256340	external
https://www.suse.com/security/cve/CVE-2026-10701	external
https://bugzilla.suse.com/1267841	external
https://www.suse.com/security/cve/CVE-2026-10702	external
https://bugzilla.suse.com/1267841	external
https://www.suse.com/security/cve/CVE-2026-12293	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12300	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12301	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12303	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12316	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12317	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12318	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12319	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12320	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12321	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12322	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12323	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-12326	external
https://bugzilla.suse.com/1268071	external
https://www.suse.com/security/cve/CVE-2026-14241	external
https://bugzilla.suse.com/1270286	external
https://www.suse.com/security/cve/CVE-2026-16364	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16365	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16366	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16367	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16370	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16372	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16373	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16376	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16378	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16380	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16382	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16384	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16385	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16386	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16388	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16389	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16392	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16393	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16394	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16395	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16397	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16398	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16399	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16400	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16401	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16402	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16403	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16404	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16406	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16407	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16408	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16409	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16410	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-16411	external
https://bugzilla.suse.com/1271649	external
https://www.suse.com/security/cve/CVE-2026-24868	external
https://bugzilla.suse.com/1257363	external
https://www.suse.com/security/cve/CVE-2026-24869	external
https://bugzilla.suse.com/1257363	external
https://www.suse.com/security/cve/CVE-2026-2794	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2795	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2796	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2797	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2798	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2799	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2800	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2801	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2802	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2803	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2804	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2805	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2806	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-2807	external
https://bugzilla.suse.com/1258568	external
https://www.suse.com/security/cve/CVE-2026-3846	external
https://bugzilla.suse.com/1259500	external
https://www.suse.com/security/cve/CVE-2026-3847	external
https://bugzilla.suse.com/1259500	external
https://www.suse.com/security/cve/CVE-2026-4722	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4723	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4724	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4725	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4726	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4727	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4728	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-4729	external
https://bugzilla.suse.com/1260083	external
https://www.suse.com/security/cve/CVE-2026-5733	external
https://bugzilla.suse.com/1261663	external
https://www.suse.com/security/cve/CVE-2026-5735	external
https://bugzilla.suse.com/1261663	external
https://www.suse.com/security/cve/CVE-2026-6746	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6747	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6748	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6749	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6750	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6751	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6752	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6753	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6754	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6755	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6756	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6757	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6758	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6759	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6760	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6761	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6762	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6763	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6764	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6765	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6766	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6767	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6768	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6769	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6770	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6771	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6772	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6773	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6774	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6775	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6776	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6777	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6778	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6779	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6780	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6781	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6782	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6783	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6784	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6785	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-6786	external
https://bugzilla.suse.com/1262230	external
https://www.suse.com/security/cve/CVE-2026-7324	external
https://bugzilla.suse.com/1263110	external
https://www.suse.com/security/cve/CVE-2026-8093	external
https://bugzilla.suse.com/1264378	external
https://www.suse.com/security/cve/CVE-2026-8945	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8948	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8951	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8952	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8960	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8963	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8964	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8965	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8966	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8967	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8969	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8971	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8972	external
https://bugzilla.suse.com/1265212	external
https://www.suse.com/security/cve/CVE-2026-8973	external
https://bugzilla.suse.com/1265212	external

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2024-10468 (GCVE-0-2024-10468)

Vulnerability from cvelistv5 – Published: 2024-10-29 12:19 – Updated: 2024-10-29 14:22

Summary

Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132 and Thunderbird < 132.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-29 14:16 UTC

CWE

Race conditions in IndexedDB
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1914982
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 132 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 132 (custom)
mozilla	firefox	Affected: 0 , < 132 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 132 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

Tyson Smith

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "132",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "132",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-10468",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-29T14:16:38.214973Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T14:22:29.067Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "132",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "132",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Tyson Smith"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox \u003c 132 and Thunderbird \u003c 132."
            }
          ],
          "value": "Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox \u003c 132 and Thunderbird \u003c 132."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Race conditions in IndexedDB",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-29T12:19:19.111Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914982"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-10468",
    "datePublished": "2024-10-29T12:19:19.111Z",
    "dateReserved": "2024-10-28T14:23:24.421Z",
    "dateUpdated": "2024-10-29T14:22:29.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11700 (GCVE-0-2024-11700)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:33 – Updated: 2025-01-06 17:46

Summary

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 15:50 UTC

CWE

Potential Tapjacking Exploit for Intent Confirmation on Android
CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1836921
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

Shaheen Fazim

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11700",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T15:50:18.846396Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-06T17:46:01.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential Tapjacking Exploit for Intent Confirmation on Android",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-02T14:09:11.818Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836921"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11700",
    "datePublished": "2024-11-26T13:33:56.353Z",
    "dateReserved": "2024-11-25T16:29:39.690Z",
    "dateUpdated": "2025-01-06T17:46:01.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11701 (GCVE-0-2024-11701)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:33 – Updated: 2024-11-27 15:44

Summary

The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 15:41 UTC

CWE

Misleading Address Bar State During Navigation Interruption
CWE-290 - Authentication Bypass by Spoofing

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1914797
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

Daniel Holbert

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11701",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T15:41:32.585177Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-290",
                "description": "CWE-290 Authentication Bypass by Spoofing",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T15:44:38.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Daniel Holbert"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Misleading Address Bar State During Navigation Interruption",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:33:56.951Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914797"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11701",
    "datePublished": "2024-11-26T13:33:56.951Z",
    "dateReserved": "2024-11-25T16:29:40.915Z",
    "dateUpdated": "2024-11-27T15:44:38.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11702 (GCVE-0-2024-11702)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:33 – Updated: 2024-11-27 15:40

Summary

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 15:37 UTC

CWE

Inadequate Clipboard Protection in Private Browsing Mode on Android
CWE-838 - Inappropriate Encoding for Output Context

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1918884
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

Umar Farooq

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11702",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T15:37:30.886708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-838",
                "description": "CWE-838 Inappropriate Encoding for Output Context",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T15:40:39.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Umar Farooq"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inadequate Clipboard Protection in Private Browsing Mode on Android",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:33:57.291Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918884"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11702",
    "datePublished": "2024-11-26T13:33:57.291Z",
    "dateReserved": "2024-11-25T16:29:42.145Z",
    "dateUpdated": "2024-11-27T15:40:39.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11703 (GCVE-0-2024-11703)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:33 – Updated: 2024-12-04 14:19

Summary

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133.

Severity

5.7 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-04 14:19 UTC

CWE

Password access without authentication via PIN bypass on Android
CWE-522 - Insufficiently Protected Credentials

Assigner

mozilla mitre root

References

2 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1928779
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox::::::android::*

Credits

Multiple Reporters

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "PHYSICAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11703",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-04T14:19:03.025427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-522",
                "description": "CWE-522 Insufficiently Protected Credentials",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-04T14:19:10.237Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Multiple Reporters"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox \u003c 133."
            }
          ],
          "value": "On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Password access without authentication via PIN bypass on Android",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:33:58.796Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1928779"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11703",
    "datePublished": "2024-11-26T13:33:58.796Z",
    "dateReserved": "2024-11-25T16:29:43.963Z",
    "dateUpdated": "2024-12-04T14:19:10.237Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11705 (GCVE-0-2024-11705)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:34 – Updated: 2024-11-27 15:14

Summary

`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows `phKey` to be NULL for certain mechanisms. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 15:11 UTC

CWE

Null Pointer Dereference in NSC_DeriveKey
CWE-476 - NULL Pointer Dereference

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1921768
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

coffeys

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11705",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T15:11:54.321151Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T15:14:36.319Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "coffeys"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ccode\u003eNSC_DeriveKey\u003c/code\u003e inadvertently assumed that the \u003ccode\u003ephKey\u003c/code\u003e parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows \u003ccode\u003ephKey\u003c/code\u003e to be NULL for certain mechanisms. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows `phKey` to be NULL for certain mechanisms. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Null Pointer Dereference in NSC_DeriveKey",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:34:01.020Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921768"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11705",
    "datePublished": "2024-11-26T13:34:01.020Z",
    "dateReserved": "2024-11-25T16:29:46.972Z",
    "dateUpdated": "2024-11-27T15:14:36.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11706 (GCVE-0-2024-11706)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:34 – Updated: 2024-11-26 16:32

Summary

A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-26 16:29 UTC

CWE

Null Pointer Dereference in PKCS#12 Utility
CWE-476 - NULL Pointer Dereference

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1923767
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)

Credits

Marc Schoenefeld

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11706",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-26T16:29:42.832477Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T16:32:23.217Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marc Schoenefeld"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the \u003ccode\u003eSEC_ASN1DecodeItem_Util\u003c/code\u003e function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Null Pointer Dereference in PKCS#12 Utility",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:34:01.638Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923767"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11706",
    "datePublished": "2024-11-26T13:34:01.638Z",
    "dateReserved": "2024-11-25T16:29:48.379Z",
    "dateUpdated": "2024-11-26T16:32:23.217Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-11708 (GCVE-0-2024-11708)

Vulnerability from cvelistv5 – Published: 2024-11-26 13:34 – Updated: 2024-11-27 15:10

Summary

Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 15:06 UTC

CWE

Data race with PlaybackParams
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

mozilla mitre root

References

3 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1922912
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 133 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 133 (custom)
mozilla	firefox	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:firefox:-:::::::*
mozilla	thunderbird	Affected: 0 , < 133 (custom) cpe:2.3:a:mozilla:thunderbird:-:::::::*

Credits

Serban Stanca

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thunderbird",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "133",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-11708",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T15:06:43.729179Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T15:10:55.501Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "133",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Serban Stanca"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
            }
          ],
          "value": "Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox \u003c 133 and Thunderbird \u003c 133."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Data race with PlaybackParams",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T13:34:02.250Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1922912"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-11708",
    "datePublished": "2024-11-26T13:34:02.250Z",
    "dateReserved": "2024-11-25T16:29:49.677Z",
    "dateUpdated": "2024-11-27T15:10:55.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7523 (GCVE-0-2024-7523)

Vulnerability from cvelistv5 – Published: 2024-08-06 12:38 – Updated: 2025-03-14 15:16

Summary

A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-06 19:41 UTC

CWE

Document content could partially obscure security prompts
CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Assigner

mozilla mitre root

References

2 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1908344
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 129 (custom)

Credits

Shaheen Fazim

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7523",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T19:41:10.840065Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-14T15:16:08.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Shaheen Fazim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. \u003cbr\u003e*This issue only affects Android versions of Firefox.* This vulnerability affects Firefox \u003c 129."
            }
          ],
          "value": "A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. \n*This issue only affects Android versions of Firefox.* This vulnerability affects Firefox \u003c 129."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Document content could partially obscure security prompts",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T12:38:15.776Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1908344"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7523",
    "datePublished": "2024-08-06T12:38:15.776Z",
    "dateReserved": "2024-08-05T23:30:07.120Z",
    "dateUpdated": "2025-03-14T15:16:08.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7530 (GCVE-0-2024-7530)

Vulnerability from cvelistv5 – Published: 2024-08-06 12:38 – Updated: 2024-08-08 17:54

Summary

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-08 17:53 UTC

CWE

Use-after-free in JavaScript code coverage collection
CWE-416 - Use After Free

Assigner

mozilla mitre root

References

2 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1904011
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 129 (custom)
mozilla	firefox	Affected: 0 , < 129 (custom) cpe:2.3:a:mozilla:firefox::::::::

Credits

Christian Holler

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firefox",
            "vendor": "mozilla",
            "versions": [
              {
                "lessThan": "129",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7530",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-08T17:53:38.431997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-08T17:54:29.302Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "129",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Christian Holler"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox \u003c 129."
            }
          ],
          "value": "Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox \u003c 129."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in JavaScript code coverage collection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-06T12:38:16.077Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1904011"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2024-7530",
    "datePublished": "2024-08-06T12:38:16.077Z",
    "dateReserved": "2024-08-05T23:30:22.840Z",
    "dateUpdated": "2024-08-08T17:54:29.302Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:11373-1

CVE-2024-10468 (GCVE-0-2024-10468)

CVE-2024-11700 (GCVE-0-2024-11700)

CVE-2024-11701 (GCVE-0-2024-11701)

CVE-2024-11702 (GCVE-0-2024-11702)

CVE-2024-11703 (GCVE-0-2024-11703)

CVE-2024-11705 (GCVE-0-2024-11705)

CVE-2024-11706 (GCVE-0-2024-11706)

CVE-2024-11708 (GCVE-0-2024-11708)

CVE-2024-7523 (GCVE-0-2024-7523)

CVE-2024-7530 (GCVE-0-2024-7530)

Tags

Sightings

Nomenclature

Related by attack behaviour