Every CVE Search/ Get API key

CVE-2022-29917

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...

9.8 CriticalFix available

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.05%Up 0.1 points since Dec 23, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2022-34227 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
EUVD-2022-34227
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-gfq4-pq7x-mq8c 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team...

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
GHSA-gfq4-pq7x-mq8c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-617, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2022-29917 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
ALPINE-CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVDEBIAN-CVE-2022-29917 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
DEBIAN-CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVRHSA-2022:1701 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:1701
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1702 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:1702
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1703 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:1703
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1704 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:1704
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1705 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:1705
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1724 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:1724
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1725 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:1725
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1726 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:1726
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1727 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:1727
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1730 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:1730
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4589 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:4589
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4590 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:4590
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:1705 9.8

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.9.0 ESR.

Security Fix(es):

  • Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909)

  • Mozilla: iframe Sandbox bypass (CVE-2022-29911)

  • Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914)

  • Mozilla: Leaking browser history with CSS variables (CVE-2022-29916)

  • Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917)

  • Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:1705
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:1730 9.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.9.0.

Security Fix(es):

  • Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909)

  • Mozilla: iframe Sandbox bypass (CVE-2022-29911)

  • Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914)

  • Mozilla: Leaking browser history with CSS variables (CVE-2022-29916)

  • Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917)

  • Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912)

  • Mozilla: Speech Synthesis feature not properly disabled (CVE-2022-29913)

  • Mozilla: Incorrect security status shown after viewing an attached email (CVE-2022-1520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:1730
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-29917 9.8

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Record
UBUNTU-CVE-2022-29917
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:1705 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.9.0 ESR.

Security Fix(es):

  • Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909)

  • Mozilla: iframe Sandbox bypass (CVE-2022-29911)

  • Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914)

  • Mozilla: Leaking browser history with CSS variables (CVE-2022-29916)

  • Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917)

  • Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:1705
Updated
2026-11-02
OSVALSA-2022:1730 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.9.0.

Security Fix(es):

  • Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909)

  • Mozilla: iframe Sandbox bypass (CVE-2022-29911)

  • Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914)

  • Mozilla: Leaking browser history with CSS variables (CVE-2022-29916)

  • Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917)

  • Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912)

  • Mozilla: Speech Synthesis feature not properly disabled (CVE-2022-29913)

  • Mozilla: Incorrect security status shown after viewing an attached email (CVE-2022-1520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:1730
Updated
2026-11-02
OSVMGASA-2022-0162 No score

Updated firefox packages fix security vulnerability

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions (CVE-2022-29909).

Firefox did not properly protect against top-level navigations for an iframe sandbox with a policy relaxed through a keyword like allow-top-navigation-by-user-activation (CVE-2022-29911).

Requests initiated through reader mode did not properly omit cookies with a SameSite attribute (CVE-2022-29912).

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks (CVE-2022-29914).

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history (CVE-2022-29916).

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2022-29917).

Record
MGASA-2022-0162
Updated
2026-11-02
OSVMGASA-2022-0163 No score

Updated thunderbird packages fix security vulnerability

Incorrect security status shown after viewing an attached email. (CVE-2022-1520) Fullscreen notification bypass using popups. (CVE-2022-29914) Bypassing permission prompt in nested browsing contexts. (CVE-2022-29909) Leaking browser history with CSS variables. (CVE-2022-29916) iframe sandbox bypass. (CVE-2022-29911) Reader mode bypassed SameSite cookies. (CVE-2022-29912) Speech Synthesis feature not properly disabled. (CVE-2022-29913) Memory safety bugs fixed in Thunderbird 91.9. (CVE-2022-29917)

Record
MGASA-2022-0163
Updated
2026-11-02
OSVopenSUSE-SU-2024:12044-1 No score

MozillaFirefox-100.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-100.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12044-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12045-1 No score

MozillaThunderbird-91.9.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12045-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-RU-2022:1579-1 No score

Recommended update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR

MFSA 2022-17 (bsc#1198970)

  • CVE-2022-29914: Fullscreen notification bypass using popups
  • CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
  • CVE-2022-29916: Leaking browser history with CSS variables
  • CVE-2022-29911: iframe Sandbox bypass
  • CVE-2022-29912: Reader mode bypassed SameSite cookies
  • CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
Record
SUSE-RU-2022:1579-1
Updated
2026-11-02
OSVSUSE-SU-2022:1719-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Various security fixes MFSA 2022-18 (bsc#1198970):

  • CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019).
  • CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448).
  • CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081).
  • CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674).
  • CVE-2022-29911: iframe sandbox bypass (bmo#1761981).
  • CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655).
  • CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778).
  • CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620).
Record
SUSE-SU-2022:1719-1
Updated
2026-11-02
OSVSUSE-SU-2022:1731-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

  • CVE-2022-29914: Fullscreen notification bypass using popups
  • CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
  • CVE-2022-29916: Leaking browser history with CSS variables
  • CVE-2022-29911: iframe Sandbox bypass
  • CVE-2022-29912: Reader mode bypassed SameSite cookies
  • CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
Record
SUSE-SU-2022:1731-1
Updated
2026-11-02
OSVSUSE-SU-2022:1748-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

  • CVE-2022-29914: Fullscreen notification bypass using popups
  • CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
  • CVE-2022-29916: Leaking browser history with CSS variables
  • CVE-2022-29911: iframe Sandbox bypass
  • CVE-2022-29912: Reader mode bypassed SameSite cookies
  • CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
Record
SUSE-SU-2022:1748-1
Updated
2026-11-02
OSVSUSE-SU-2022:1757-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

  • CVE-2022-29914: Fullscreen notification bypass using popups
  • CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
  • CVE-2022-29916: Leaking browser history with CSS variables
  • CVE-2022-29911: iframe Sandbox bypass
  • CVE-2022-29912: Reader mode bypassed SameSite cookies
  • CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
Record
SUSE-SU-2022:1757-1
Updated
2026-11-02
OSVUSN-5411-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass permission prompts, obtain sensitive information, bypass security restrictions, or execute arbitrary code.

Record
USN-5411-1
Updated
2026-11-02
OSVUSN-5435-1 No score

thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass permission prompts, obtain sensitive information, bypass security restrictions, cause user confusion, or execute arbitrary code. (CVE-2022-29909, CVE-2022-29911, CVE-2022-29912, CVE-2022-29913, CVE-2022-29914, CVE-2022-29916, CVE-2022-29917)

It was discovered that Thunderbird would show the wrong security status after viewing an attached message that is signed or encrypted. An attacker could potentially exploit this by tricking the user into trusting the authenticity of a message. (CVE-2022-1520)

It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could exploit this to execute JavaScript in a privileged context. (CVE-2022-1529, CVE-2022-1802)

Record
USN-5435-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Alpine:v3.16
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.17
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.18
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.19
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.20
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.21
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.22
 before 100.0-r0
100.0-r0
firefox
Alpine:v3.23
 before 100.0-r0
100.0-r0
firefox-esr
Alpine:v3.15
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.16
 before 91.9.0-r0
91.9.0-r0
Show 152 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.17
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.18
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.19
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.20
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.21
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.22
 before 91.9.0-r0
91.9.0-r0
firefox-esr
Alpine:v3.23
 before 91.9.0-r0
91.9.0-r0
librewolf
Alpine:v3.21
 before 100.0-r0
100.0-r0
librewolf
Alpine:v3.22
 before 100.0-r0
100.0-r0
librewolf
Alpine:v3.23
 before 100.0-r0
100.0-r0
librewolf
Alpine:v3.24
 before 100.0-r0
100.0-r0
thunderbird
Alpine:v3.16
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.17
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.18
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.19
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.20
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.21
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.22
 before 91.9.0-r0
91.9.0-r0
thunderbird
Alpine:v3.23
 before 91.9.0-r0
91.9.0-r0
firefox
AlmaLinux:8
 before 91.9.0-1.el8_5.alma
91.9.0-1.el8_5.alma
thunderbird
AlmaLinux:8
 before 91.9.0-3.el8_5.alma
91.9.0-3.el8_5.alma
firefox-esr
Debian:12
 before 91.9.0esr-1
91.9.0esr-1
firefox-esr
Debian:13
 before 91.9.0esr-1
91.9.0esr-1
firefox-esr
Debian:14
 before 91.9.0esr-1
91.9.0esr-1
thunderbird
Debian:12
 before 1:91.9.0-1
1:91.9.0-1
thunderbird
Debian:13
 before 1:91.9.0-1
1:91.9.0-1
thunderbird
Debian:14
 before 1:91.9.0-1
1:91.9.0-1
firefox-esr
Debian:9
 before 91.9.0esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
91.9.0esr-1~deb9u1
thunderbird
Debian:9
 before 1:91.9.0-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:91.9.0-1~deb9u1
firefox-esr
Debian:10
 before 91.9.0esr-1~deb10u1, plus listed versions
60.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u160.8.0esr-1~deb9u1
Show 45 moreShow less
60.9.0esr-1~deb10u160.9.0esr-1~deb8u160.9.0esr-1~deb8u260.9.0esr-1~deb9u168.0.2esr-168.1.0esr-168.10.0esr-168.10.0esr-1~deb10u168.10.0esr-1~deb9u168.11.0esr-168.11.0esr-1~deb10u168.11.0esr-1~deb9u168.12.0esr-168.12.0esr-1~deb10u168.12.0esr-1~deb9u168.2.0esr-168.2.0esr-1~deb10u168.2.0esr-1~deb8u168.2.0esr-1~deb9u168.2.0esr-1~deb9u268.3.0esr-168.3.0esr-1~deb10u168.3.0esr-1~deb8u168.3.0esr-1~deb9u168.4.0esr-168.4.0esr-1~deb10u168.4.0esr-1~deb8u168.4.0esr-1~deb9u168.4.1esr-168.4.1esr-1~deb10u168.4.1esr-1~deb8u168.4.1esr-1~deb9u168.4.2esr-168.5.0esr-168.5.0esr-1~deb10u168.5.0esr-1~deb8u168.5.0esr-1~deb9u168.6.0esr-168.6.0esr-1~deb10u168.6.0esr-1~deb8u168.6.0esr-1~deb9u168.6.1esr-168.6.1esr-1~deb10u168.6.1esr-1~deb9u168.7.0esr-1
91.9.0esr-1~deb10u1
firefox-esr
Debian:11
 before 91.9.0esr-1~deb11u1, plus listed versions
78.12.0esr-178.13.0esr-178.13.0esr-1~deb10u178.13.0esr-1~deb11u178.13.0esr-1~deb9u1
Show 39 moreShow less
78.14.0esr-178.14.0esr-1~deb10u178.14.0esr-1~deb11u178.14.0esr-1~deb9u178.15.0esr-1~deb10u178.15.0esr-1~deb11u178.15.0esr-1~deb9u191.0.1esr-191.0esr-191.1.0esr-191.2.0esr-191.3.0esr-191.3.0esr-291.4.0esr-191.4.1esr-1~deb11u191.4.1esr-1~deb9u191.5.0esr-191.5.0esr-1~deb10u191.5.0esr-1~deb11u191.5.0esr-1~deb9u191.5.1esr-191.6.0esr-191.6.0esr-1~deb10u191.6.0esr-1~deb11u191.6.0esr-1~deb9u191.6.1esr-191.6.1esr-1~deb10u191.6.1esr-1~deb11u191.6.1esr-1~deb9u191.7.0esr-191.7.0esr-1~deb10u191.7.0esr-1~deb11u191.7.0esr-1~deb9u191.8.0esr-191.8.0esr-1~deb10u191.8.0esr-1~deb11u191.8.0esr-1~deb9u191.9.0esr-1~deb10u191.9.0esr-1~deb9u1
91.9.0esr-1~deb11u1
thunderbird
Debian:10
 before 1:91.9.0-1~deb10u1, plus listed versions
1:60.7.2-11:60.8.0-11:60.8.0-1~deb10u11:60.8.0-1~deb8u11:60.8.0-1~deb9u1
Show 45 moreShow less
1:60.8.0-21:60.9.0-11:60.9.0-1~deb10u11:60.9.0-1~deb8u11:60.9.0-1~deb9u11:65.0~b1-11:66.0~b1-11:67.0~b3-11:68.0~b1-11:68.1.1-1~exp11:68.1.2-1~exp11:68.10.0-11:68.10.0-1~deb10u11:68.10.0-1~deb9u11:68.11.0-11:68.11.0-1~deb10u11:68.11.0-1~deb9u11:68.11.0-21:68.11.0-31:68.12.0-11:68.12.0-1~deb10u11:68.12.0-1~deb9u11:68.12.0-1~deb9u21:68.2.1-11:68.2.2-11:68.2.2-1~deb10u11:68.2.2-1~deb8u11:68.2.2-1~deb9u11:68.3.0-11:68.3.0-21:68.3.0-2~deb10u11:68.3.0-2~deb8u11:68.3.0-2~deb9u11:68.3.1-11:68.4.1-11:68.4.1-1~deb10u11:68.4.1-1~deb8u11:68.4.1-1~deb9u11:68.4.2-11:68.5.0-11:68.5.0-1~deb10u11:68.5.0-1~deb8u11:68.5.0-1~deb9u11:68.6.0-11:68.6.0-1~deb10u1
1:91.9.0-1~deb10u1
thunderbird
Debian:11
 before 1:91.9.0-1~deb11u1, plus listed versions
1:78.12.0-11:78.13.0-11:78.13.0-1~deb10u11:78.13.0-1~deb11u11:78.13.0-1~deb9u1
Show 45 moreShow less
1:78.14.0-11:78.14.0-1~deb10u11:78.14.0-1~deb11u11:78.14.0-1~deb9u11:84.0~b3-11:85.0~b3-11:86.0~b3-11:88.0~b2-11:89.0~b2-11:90.0~b2-11:91.0-11:91.0.2-11:91.0~b1-11:91.0~b3-11:91.0~b5-11:91.1.0-11:91.1.1-11:91.2.0-11:91.2.1-11:91.3.0-11:91.3.2-11:91.4.0-11:91.4.1-11:91.4.1-1~deb10u11:91.4.1-1~deb11u11:91.4.1-1~deb9u11:91.5.0-11:91.5.0-1~deb9u11:91.5.0-21:91.5.0-2~deb10u11:91.5.0-2~deb11u11:91.5.1-11:91.6.0-11:91.6.0-1~deb10u11:91.6.0-1~deb11u11:91.6.0-1~deb9u11:91.6.1-11:91.6.1-1~deb10u11:91.6.1-1~deb11u11:91.6.1-1~deb9u11:91.6.2-11:91.6.2-1~deb10u11:91.6.2-1~deb11u11:91.6.2-1~deb9u11:91.7.0-1
1:91.9.0-1~deb11u1
firefox
Mageia:8
 before 91.9.0-1.mga8
91.9.0-1.mga8
firefox-l10n
Mageia:8
 before 91.9.0-1.mga8
91.9.0-1.mga8
nss
Mageia:8
 before 3.78.0-1.mga8
3.78.0-1.mga8
thunderbird
Mageia:8
 before 91.9.0-1.mga8
91.9.0-1.mga8
thunderbird-l10n
Mageia:8
 before 91.9.0-1.mga8
91.9.0-1.mga8
firefox
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-1.el8_1
0:91.9.0-1.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-1.el8_1
0:91.9.0-1.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-1.el8_1
0:91.9.0-1.el8_1
firefox
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-1.el8_4
0:91.9.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-1.el8_4
0:91.9.0-1.el8_4
firefox-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-1.el8_4
0:91.9.0-1.el8_4
firefox
Red Hat:enterprise_linux:7::client
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::server
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:91.9.0-1.el7_9
0:91.9.0-1.el7_9
firefox
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-1.el8_2
0:91.9.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-1.el8_2
0:91.9.0-1.el8_2
firefox-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-1.el8_2
0:91.9.0-1.el8_2
firefox
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-1.el8_5
0:91.9.0-1.el8_5
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-1.el8_5
0:91.9.0-1.el8_5
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-1.el8_5
0:91.9.0-1.el8_5
thunderbird
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-3.el8_2
0:91.9.0-3.el8_2
thunderbird-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-3.el8_2
0:91.9.0-3.el8_2
thunderbird-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:91.9.0-3.el8_2
0:91.9.0-3.el8_2
thunderbird
Red Hat:enterprise_linux:7::client
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird
Red Hat:enterprise_linux:7::server
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird
Red Hat:enterprise_linux:7::workstation
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:91.9.0-3.el7_9
0:91.9.0-3.el7_9
thunderbird
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-3.el8_4
0:91.9.0-3.el8_4
thunderbird-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-3.el8_4
0:91.9.0-3.el8_4
thunderbird-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:91.9.0-3.el8_4
0:91.9.0-3.el8_4
thunderbird
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-3.el8_1
0:91.9.0-3.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-3.el8_1
0:91.9.0-3.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.9.0-3.el8_1
0:91.9.0-3.el8_1
thunderbird
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-3.el8_5
0:91.9.0-3.el8_5
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-3.el8_5
0:91.9.0-3.el8_5
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:91.9.0-3.el8_5
0:91.9.0-3.el8_5
thunderbird
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-3.el9_0
0:91.9.0-3.el9_0
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-3.el9_0
0:91.9.0-3.el9_0
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-3.el9_0
0:91.9.0-3.el9_0
firefox
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-1.el9_0
0:91.9.0-1.el9_0
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-1.el9_0
0:91.9.0-1.el9_0
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:91.9.0-1.el9_0
0:91.9.0-1.el9_0
firefox
Rocky Linux:8
 before 0:91.9.0-1.el8_5
0:91.9.0-1.el8_5
thunderbird
Rocky Linux:8
 before 0:91.9.0-3.el8_5
0:91.9.0-3.el8_5
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Manager Proxy 4.1
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Manager Retail Branch Server 4.1
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Manager Server 4.1
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
SUSE:Enterprise Storage 7
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
openSUSE:Leap 15.3
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaFirefox
openSUSE:Leap 15.4
 before 91.9.0-150200.152.33.1
91.9.0-150200.152.33.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP3
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP3
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaThunderbird
openSUSE:Leap 15.3
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaThunderbird
openSUSE:Leap 15.4
 before 91.9.0-150200.8.68.2
91.9.0-150200.8.68.2
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Server 15-LTSS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Enterprise Storage 6
 before 91.9.0-150000.150.38.3
91.9.0-150000.150.38.3
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Manager Proxy 4.1
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Manager Retail Branch Server 4.1
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Manager Server 4.1
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:Enterprise Storage 7
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
openSUSE:Leap 15.3
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
openSUSE:Leap 15.4
 before 91.9.0-150200.152.37.3
91.9.0-150200.152.37.3
MozillaFirefox
SUSE:HPE Helion OpenStack 8
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:OpenStack Cloud 8
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:OpenStack Cloud 9
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 8
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 9
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
 before 91.9.0-112.108.4
91.9.0-112.108.4
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 91.9.0-112.108.4
91.9.0-112.108.4
firefox
Ubuntu:18.04:LTS
 before 100.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 45 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1
100.0+build2-0ubuntu0.18.04.1
thunderbird
Ubuntu:18.04:LTS
 before 1:91.9.1+build1-0ubuntu0.18.04.1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
Show 23 moreShow less
1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.11:68.2.1+build1-0ubuntu0.18.04.11:68.2.2+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.11:68.7.0+build1-0ubuntu0.18.04.11:68.8.0+build2-0ubuntu0.18.04.21:68.10.0+build1-0ubuntu0.18.04.11:78.8.1+build1-0ubuntu0.18.04.11:78.11.0+build1-0ubuntu0.18.04.21:78.13.0+build1-0ubuntu0.18.04.11:78.14.0+build1-0ubuntu0.18.04.11:78.14.0+build1-0ubuntu0.18.04.21:91.5.0+build1-0ubuntu0.18.04.11:91.7.0+build2-0ubuntu0.18.04.11:91.8.1+build1-0ubuntu0.18.04.1
1:91.9.1+build1-0ubuntu0.18.04.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
firefox
Ubuntu:20.04:LTS
 before 100.0+build2-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
100.0+build2-0ubuntu0.20.04.1
thunderbird
Ubuntu:20.04:LTS
 before 1:91.9.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 18 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.1
1:91.9.1+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:91.9.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 7 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu1
1:91.9.1+build1-0ubuntu0.22.04.1
MozillaFirefox
openSUSE:Tumbleweed
 before 100.0-1.1
100.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 91.9.0-1.1
91.9.0-1.1
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-29917 is a critical vulnerability (CVSS 9.8) in Mozilla Firefox, published May 4, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.05%, the 64th percentile. Fixed in firefox 100.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 709 versions and 1,768 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open