csaf_suse - suse-su-2025:03007-1

suse-su-2025:03007-1

Vulnerability from csaf_suse

Published

2025-08-28 08:03

Modified

2025-08-28 08:03

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Updated to Mozilla Thunderbird 140.2 MFSA 2025-72 (bsc#1248162): * CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component * CVE-2025-9181: Uninitialized memory in the JavaScript Engine component * CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component * CVE-2025-9184: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 * CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 Other fixes: * Users were unable to use Fastmail calendars due to missing OAuth settings * Account setup error handling was broken for Account hub * Menu bar was hidden after updating from 128esr to 140esr

Patchnames

SUSE-2025-3007,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3007,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3007,SUSE-SLE-Product-WE-15-SP6-2025-3007,SUSE-SLE-Product-WE-15-SP7-2025-3007,openSUSE-SLE-15.6-2025-3007

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nUpdated to Mozilla Thunderbird 140.2 MFSA 2025-72 (bsc#1248162):\n  * CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP\n    component\n  * CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component\n  * CVE-2025-9181: Uninitialized memory in the JavaScript Engine component\n  * CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics:\n    WebRender component\n  * CVE-2025-9184: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird\n    ESR 140.2, Firefox 142 and Thunderbird 142\n  * CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR\n    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,\n    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142\n\nOther fixes:\n  * Users were unable to use Fastmail calendars due to\n    missing OAuth settings\n  * Account setup error handling was broken for Account\n    hub\n  * Menu bar was hidden after updating from 128esr to\n    140esr\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-3007,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3007,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3007,SUSE-SLE-Product-WE-15-SP6-2025-3007,SUSE-SLE-Product-WE-15-SP7-2025-3007,openSUSE-SLE-15.6-2025-3007",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03007-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:03007-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202503007-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:03007-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041411.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1248162",
        "url": "https://bugzilla.suse.com/1248162"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9179 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9179/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9180 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9180/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9181 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9181/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9182 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9184 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9184/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9185 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9185/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2025-08-28T08:03:38Z",
      "generator": {
        "date": "2025-08-28T08:03:38Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:03007-1",
      "initial_release_date": "2025-08-28T08:03:38Z",
      "revision_history": [
        {
          "date": "2025-08-28T08:03:38Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
                  "product_id": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
                  "product_id": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
                  "product_id": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
                  "product_id": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-9179",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9179"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9179",
          "url": "https://www.suse.com/security/cve/CVE-2025-9179"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9179",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9179"
    },
    {
      "cve": "CVE-2025-9180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9180",
          "url": "https://www.suse.com/security/cve/CVE-2025-9180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9180",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9180"
    },
    {
      "cve": "CVE-2025-9181",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9181"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9181",
          "url": "https://www.suse.com/security/cve/CVE-2025-9181"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9181",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9181"
    },
    {
      "cve": "CVE-2025-9182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9182",
          "url": "https://www.suse.com/security/cve/CVE-2025-9182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9182",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9182"
    },
    {
      "cve": "CVE-2025-9184",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9184"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9184",
          "url": "https://www.suse.com/security/cve/CVE-2025-9184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9184",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9184"
    },
    {
      "cve": "CVE-2025-9185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9185",
          "url": "https://www.suse.com/security/cve/CVE-2025-9185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248162 for CVE-2025-9185",
          "url": "https://bugzilla.suse.com/1248162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.2.0-150200.8.236.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.2.0-150200.8.236.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-28T08:03:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9185"
    }
  ]
}

CVE-2025-9184 (GCVE-0-2025-9184)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-10-30 16:10

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1929482%2C1976376%2C1979163%2C1979955
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9184",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:56:22.360769Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-21T13:45:24.222Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Paul Bone, Ryan VanderMeulen and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T16:10:59.423Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1929482%2C1976376%2C1979163%2C1979955"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9184",
    "datePublished": "2025-08-19T20:33:58.037Z",
    "dateReserved": "2025-08-19T15:56:07.296Z",
    "dateUpdated": "2025-10-30T16:10:59.423Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-9181 (GCVE-0-2025-9181)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-11-03 18:14

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

Uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox < 142, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1977130
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-66/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-71/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 128.14
Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 128.14
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T14:05:26.357732Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-457",
                "description": "CWE-457 Use of Uninitialized Variable",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-20T15:18:44.981Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:14:14.144Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "Uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T15:57:45.640Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1977130"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Uninitialized memory in the JavaScript Engine component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9181",
    "datePublished": "2025-08-19T20:33:55.063Z",
    "dateReserved": "2025-08-19T15:55:41.889Z",
    "dateUpdated": "2025-11-03T18:14:14.144Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-9180 (GCVE-0-2025-9180)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-11-03 18:14

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1979782
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-65/
	https://www.mozilla.org/security/advisories/mfsa2025-66/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-71/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 115.27
Mozilla	Firefox ESR	Version: unspecified < 128.14
Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 128.14
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9180",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T14:05:47.767479Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-20T15:18:51.995Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:14:12.191Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.27",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Tom Van Goethem"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T15:57:04.285Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979782"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Same-origin policy bypass in the Graphics: Canvas2D component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9180",
    "datePublished": "2025-08-19T20:33:54.532Z",
    "dateReserved": "2025-08-19T15:55:39.806Z",
    "dateUpdated": "2025-11-03T18:14:12.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-9182 (GCVE-0-2025-9182)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-10-30 16:10

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1975837
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9182",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T14:04:46.460636Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-20T15:18:29.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T16:10:52.097Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975837"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Denial-of-service due to out-of-memory in the Graphics: WebRender component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9182",
    "datePublished": "2025-08-19T20:33:56.512Z",
    "dateReserved": "2025-08-19T15:56:02.735Z",
    "dateUpdated": "2025-10-30T16:10:52.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-9185 (GCVE-0-2025-9185)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-11-03 18:14

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-65/
	https://www.mozilla.org/security/advisories/mfsa2025-66/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-71/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 115.27
Mozilla	Firefox ESR	Version: unspecified < 128.14
Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 128.14
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9185",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:56:23.417311Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-21T13:45:49.239Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:14:16.037Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.27",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "The Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T15:58:04.152Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9185",
    "datePublished": "2025-08-19T20:33:55.556Z",
    "dateReserved": "2025-08-19T15:56:07.840Z",
    "dateUpdated": "2025-11-03T18:14:16.037Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-9179 (GCVE-0-2025-9179)

Vulnerability from cvelistv5

Published

2025-08-19 20:33

Modified

2025-11-03 18:14

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1979527
	https://www.mozilla.org/security/advisories/mfsa2025-64/
	https://www.mozilla.org/security/advisories/mfsa2025-65/
	https://www.mozilla.org/security/advisories/mfsa2025-66/
	https://www.mozilla.org/security/advisories/mfsa2025-67/
	https://www.mozilla.org/security/advisories/mfsa2025-70/
	https://www.mozilla.org/security/advisories/mfsa2025-71/
	https://www.mozilla.org/security/advisories/mfsa2025-72/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 142

Mozilla	Firefox ESR	Version: unspecified < 115.27
Mozilla	Firefox ESR	Version: unspecified < 128.14
Mozilla	Firefox ESR	Version: unspecified < 140.2
Mozilla	Thunderbird	Version: unspecified < 142
Mozilla	Thunderbird	Version: unspecified < 128.14
Mozilla	Thunderbird	Version: unspecified < 140.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9179",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T14:06:11.940109Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-20T15:18:57.429Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:14:10.275Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.27",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "142",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "128.14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Oskar"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
            }
          ],
          "value": "An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox \u003c 142, Firefox ESR \u003c 115.27, Firefox ESR \u003c 128.14, Firefox ESR \u003c 140.2, Thunderbird \u003c 142, Thunderbird \u003c 128.14, and Thunderbird \u003c 140.2."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-30T15:38:04.768Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979527"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "title": "Sandbox escape due to invalid pointer in the Audio/Video: GMP component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-9179",
    "datePublished": "2025-08-19T20:33:53.949Z",
    "dateReserved": "2025-08-19T15:55:37.418Z",
    "dateUpdated": "2025-11-03T18:14:10.275Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2025:03007-1

Vulnerability from csaf_suse

CVE-2025-9184 (GCVE-0-2025-9184)

Vulnerability from cvelistv5

CVE-2025-9181 (GCVE-0-2025-9181)

Vulnerability from cvelistv5

CVE-2025-9180 (GCVE-0-2025-9180)

Vulnerability from cvelistv5

CVE-2025-9182 (GCVE-0-2025-9182)

Vulnerability from cvelistv5

CVE-2025-9185 (GCVE-0-2025-9185)

Vulnerability from cvelistv5

CVE-2025-9179 (GCVE-0-2025-9179)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature