csaf_suse - suse-su-2025:03309-1

suse-su-2025:03309-1

Vulnerability from csaf_suse

Published

2025-09-23 14:30

Modified

2025-09-23 14:30

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.3 (bsc#1249391). Security issues fixed: - MFSA 2025-78 * CVE-2025-10527: sandbox escape due to use-after-free in the Graphics: Canvas2D component. * CVE-2025-10528: sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. * CVE-2025-10529: same-origin policy bypass in the Layout component. * CVE-2025-10532: incorrect boundary conditions in the JavaScript: GC component. * CVE-2025-10533: integer overflow in the SVG component. * CVE-2025-10536: information disclosure in the Networking: Cache component. * CVE-2025-10537: memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Other issues fixed: - Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded draft subject. - Thunderbird could crash on startup. - Thunderbird could crash when importing mail. - Opening Website header link in RSS feed incorrectly re-encoded URL parameters.

Patchnames

SUSE-2025-3309,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3309,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3309,SUSE-SLE-Product-WE-15-SP6-2025-3309,SUSE-SLE-Product-WE-15-SP7-2025-3309,openSUSE-SLE-15.6-2025-3309

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 140.3 (bsc#1249391).\n\nSecurity issues fixed:\n\n- MFSA 2025-78\n  * CVE-2025-10527: sandbox escape due to use-after-free in the Graphics: Canvas2D component.\n  * CVE-2025-10528: sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component.\n  * CVE-2025-10529: same-origin policy bypass in the Layout component.\n  * CVE-2025-10532: incorrect boundary conditions in the JavaScript: GC component.\n  * CVE-2025-10533: integer overflow in the SVG component.\n  * CVE-2025-10536: information disclosure in the Networking: Cache component.\n  * CVE-2025-10537: memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird\n    143.\n\nOther issues fixed:\n\n- Right-clicking \u0027List-ID\u0027 -\u003e \u0027Unsubscribe\u0027 created double encoded draft subject.\n- Thunderbird could crash on startup.\n- Thunderbird could crash when importing mail.\n- Opening Website header link in RSS feed incorrectly re-encoded URL parameters.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-3309,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3309,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3309,SUSE-SLE-Product-WE-15-SP6-2025-3309,SUSE-SLE-Product-WE-15-SP7-2025-3309,openSUSE-SLE-15.6-2025-3309",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03309-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:03309-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202503309-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:03309-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-September/041811.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1249391",
        "url": "https://bugzilla.suse.com/1249391"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10527 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10527/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10528 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10528/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10529 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10529/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10532 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10532/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10533 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10536 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10536/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-10537 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-10537/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2025-09-23T14:30:31Z",
      "generator": {
        "date": "2025-09-23T14:30:31Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:03309-1",
      "initial_release_date": "2025-09-23T14:30:31Z",
      "revision_history": [
        {
          "date": "2025-09-23T14:30:31Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
                  "product_id": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
                  "product_id": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
                  "product_id": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
                  "product_id": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-10527",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10527"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10527",
          "url": "https://www.suse.com/security/cve/CVE-2025-10527"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10527",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10527"
    },
    {
      "cve": "CVE-2025-10528",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10528"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10528",
          "url": "https://www.suse.com/security/cve/CVE-2025-10528"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10528",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10528"
    },
    {
      "cve": "CVE-2025-10529",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10529"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10529",
          "url": "https://www.suse.com/security/cve/CVE-2025-10529"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10529",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10529"
    },
    {
      "cve": "CVE-2025-10532",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10532"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10532",
          "url": "https://www.suse.com/security/cve/CVE-2025-10532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10532",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10532"
    },
    {
      "cve": "CVE-2025-10533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 115.28, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10533",
          "url": "https://www.suse.com/security/cve/CVE-2025-10533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10533",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10533"
    },
    {
      "cve": "CVE-2025-10536",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10536"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10536",
          "url": "https://www.suse.com/security/cve/CVE-2025-10536"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10536",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10536"
    },
    {
      "cve": "CVE-2025-10537",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-10537"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
          "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-10537",
          "url": "https://www.suse.com/security/cve/CVE-2025-10537"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249391 for CVE-2025-10537",
          "url": "https://bugzilla.suse.com/1249391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-common-140.3.0-150200.8.239.1.x86_64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.aarch64",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.ppc64le",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.s390x",
            "openSUSE Leap 15.6:MozillaThunderbird-translations-other-140.3.0-150200.8.239.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-23T14:30:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-10537"
    }
  ]
}

CVE-2025-10529 (GCVE-0-2025-10529)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-17 17:44

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

Same-origin policy bypass in the Layout component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1970490
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-17T17:44:09.772488Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-942",
                "description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-17T17:44:13.559Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Daniel Holbert"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Same-origin policy bypass in the Layout component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:45.791Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970490"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10529",
    "datePublished": "2025-09-16T12:26:35.822Z",
    "dateReserved": "2025-09-16T06:48:38.059Z",
    "dateUpdated": "2025-09-17T17:44:13.559Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10533 (GCVE-0-2025-10533)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-16 14:55

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Integer overflow in the SVG component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1980788
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-74/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 115.28
Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10533",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-16T13:44:57.212905Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "CWE-190 Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-16T13:45:01.113Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.28",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew Creskey"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 115.28, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 115.28, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Integer overflow in the SVG component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:44.476Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980788"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-74/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10533",
    "datePublished": "2025-09-16T12:26:34.655Z",
    "dateReserved": "2025-09-16T06:48:44.680Z",
    "dateUpdated": "2025-09-16T14:55:44.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10536 (GCVE-0-2025-10536)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-22 17:34

Severity ?

6.2 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

Information disclosure in the Networking: Cache component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1981502
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 6.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10536",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-22T17:33:10.783126Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-22T17:34:03.511Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ibuki Sato"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure in the Networking: Cache component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:46.732Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1981502"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10536",
    "datePublished": "2025-09-16T12:26:36.546Z",
    "dateReserved": "2025-09-16T06:48:50.429Z",
    "dateUpdated": "2025-09-22T17:34:03.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10537 (GCVE-0-2025-10537)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-17 03:55

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

Summary

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10537",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-16T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-17T03:55:49.418Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew McCreight and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:47.186Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10537",
    "datePublished": "2025-09-16T12:26:37.029Z",
    "dateReserved": "2025-09-16T06:48:52.559Z",
    "dateUpdated": "2025-09-17T03:55:49.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10528 (GCVE-0-2025-10528)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-18 18:49

Severity ?

7.3 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1986185
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10528",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-17T18:02:06.261366Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-18T18:49:09.471Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Oskar L"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:45.445Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986185"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10528",
    "datePublished": "2025-09-16T12:26:35.394Z",
    "dateReserved": "2025-09-16T06:48:35.863Z",
    "dateUpdated": "2025-09-18T18:49:09.471Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10527 (GCVE-0-2025-10527)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-16 14:55

Severity ?

7.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CWE

Sandbox escape due to use-after-free in the Graphics: Canvas2D component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1984825
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10527",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-16T13:30:33.580712Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-16T13:31:16.577Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Oskar L"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:44.890Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984825"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10527",
    "datePublished": "2025-09-16T12:26:35.079Z",
    "dateReserved": "2025-09-16T06:48:33.808Z",
    "dateUpdated": "2025-09-16T14:55:44.890Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-10532 (GCVE-0-2025-10532)

Vulnerability from cvelistv5

Published

2025-09-16 12:26

Modified

2025-09-17 17:11

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

Incorrect boundary conditions in the JavaScript: GC component

Summary

This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

References

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1979502
	https://www.mozilla.org/security/advisories/mfsa2025-73/
	https://www.mozilla.org/security/advisories/mfsa2025-75/
	https://www.mozilla.org/security/advisories/mfsa2025-77/
	https://www.mozilla.org/security/advisories/mfsa2025-78/

Impacted products

Vendor

Product

Version

Mozilla

Firefox

Version: unspecified < 143

Mozilla	Firefox ESR	Version: unspecified < 140.3
Mozilla	Thunderbird	Version: unspecified < 143
Mozilla	Thunderbird	Version: unspecified < 140.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-10532",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-17T17:10:59.315985Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-754",
                "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-17T17:11:04.581Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "143",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "140.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Gary Kwong"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
            }
          ],
          "value": "This vulnerability affects Firefox \u003c 143, Firefox ESR \u003c 140.3, Thunderbird \u003c 143, and Thunderbird \u003c 140.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect boundary conditions in the JavaScript: GC component",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T14:55:46.404Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979502"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-10532",
    "datePublished": "2025-09-16T12:26:36.188Z",
    "dateReserved": "2025-09-16T06:48:42.913Z",
    "dateUpdated": "2025-09-17T17:11:04.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2025:03309-1

Vulnerability from csaf_suse

CVE-2025-10529 (GCVE-0-2025-10529)

Vulnerability from cvelistv5

CVE-2025-10533 (GCVE-0-2025-10533)

Vulnerability from cvelistv5

CVE-2025-10536 (GCVE-0-2025-10536)

Vulnerability from cvelistv5

CVE-2025-10537 (GCVE-0-2025-10537)

Vulnerability from cvelistv5

CVE-2025-10528 (GCVE-0-2025-10528)

Vulnerability from cvelistv5

CVE-2025-10527 (GCVE-0-2025-10527)

Vulnerability from cvelistv5

CVE-2025-10532 (GCVE-0-2025-10532)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature