Every CVE Search/ Get API key

CVE-2023-5217

Electron affected by libvpx's heap buffer overflow in vp8 encoding

8.8 HighIn KEVPublic exploitFix available

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

49.0%Up 48.9 points since Sep 29, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2023-2578 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
EUVD-2023-2578
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qqvq-6xgj-jw8g 8.8

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
GHSA-qqvq-6xgj-jw8g
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CISA KEV No score

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.

Record
CVE-2023-5217
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2023-5217 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
ALPINE-CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 42 moreShow less
OSV 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-5217 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
DEBIAN-CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-qqvq-6xgj-jw8g 8.8

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
GHSA-qqvq-6xgj-jw8g
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVJLSEC-2026-375 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
JLSEC-2026-375
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1740 8.8

libvpx security update

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide.

Security Fix(es):

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.(CVE-2023-44488)

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2023-5217)

Record
OESA-2023-1740
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1775 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2023-5217)

Record
OESA-2023-1775
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5426 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5426
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5427 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5427
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5428 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5428
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5429 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5429
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5430 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5430
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5432 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5432
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5433 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5433
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5434 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5434
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5435 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5435
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5436 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5436
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5437 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5437
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5438 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5438
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5439 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5439
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5440 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5440
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5475 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5475
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5477 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5477
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5534 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5534
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5535 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5535
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5536 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5536
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5537 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5537
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5538 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5538
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5539 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5539
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5540 8.8

Red Hat Security Advisory: libvpx security update

Record
RHSA-2023:5540
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:5537 8.8

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

  • libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:5537
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-5217 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
UBUNTU-CVE-2023-5217
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:5434 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.3.1 ESR.

Security Fix(es):

  • firefox: use-after-free in workers (CVE-2023-3600)
  • Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)
  • Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)
  • Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176)
  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5434
Updated
2026-11-02
OSVALSA-2023:5435 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.3.1.

Security Fix(es):

  • firefox: use-after-free in workers (CVE-2023-3600)
  • Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)
  • Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)
  • Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176)
  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5435
Updated
2026-11-02
OSVALSA-2023:5537 No score

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
  • libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5537
Updated
2026-11-02
OSVALSA-2023:5539 No score

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
  • libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5539
Updated
2026-11-02
OSVMGASA-2023-0280 No score

Updated libvpx packages fix security vulnerability

Heap buffer overflow in vp8 encoding in libvpx allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
MGASA-2023-0280
Updated
2026-11-02
OSVMGASA-2023-0283 No score

Updated chromium-browser-stable package fixes bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 117.0.5938.92 release, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92, 117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179.

Google is aware that an exploit for CVE-2023-5217 exists in the wild.

High CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx. Reported by Clément Lecigne of Google's Threat Analysis Group on 2023-09-25

High CVE-2023-5186: Use after free in Passwords. Reported by [pwn2car] on 2023-09-05

High CVE-2023-5187: Use after free in Extensions. Reported by Thomas Orlita on 2023-08-25

Critical CVE-2023-4863: Heap buffer overflow in WebP. Reported by Apple Security Engineering and Architecture (SEAR) and The Citizen Lab at The University of Torontoʼs Munk School on 2023-09-06

Medium CVE-2023-4900: Inappropriate implementation in Custom Tabs. Reported by Levit Nudi from Kenya on 2023-04-06

Medium CVE-2023-4901: Inappropriate implementation in Prompts. Reported by Kang Ali on 2023-06-29

Medium CVE-2023-4902: Inappropriate implementation in Input. Reported by Axel Chong on 2023-06-14

Medium CVE-2023-4903: Inappropriate implementation in Custom Mobile Tabs. Reported by Ahmed ElMasry on 2023-05-18

Medium CVE-2023-4904: Insufficient policy enforcement in Downloads. Reported by Tudor Enache @tudorhacks on 2023-06-09

Medium CVE-2023-4905: Inappropriate implementation in Prompts. Reported by Hafiizh on 2023-04-29

Low CVE-2023-4906: Insufficient policy enforcement in Autofill. Reported by Ahmed ElMasry on 2023-05-30

Low CVE-2023-4907: Inappropriate implementation in Intents. Reported by Mohit Raj (shadow2639) on 2023-07-04

Low CVE-2023-4908: Inappropriate implementation in Picture in Picture. Reported by Axel Chong on 2023-06-06

Low CVE-2023-4909: Inappropriate implementation in Interstitials. Reported by Axel Chong on 2023-07-09

Critical CVE-2023-4863: Heap buffer overflow in WebP

High CVE-2023-4761: Out of bounds memory access in FedCM. Reported by DarkNavy on 2023-08-28

High CVE-2023-4762: Type Confusion in V8. Reported by anonymous on 2023-08-16

High CVE-2023-4763: Use after free in Networks. Reported by anonymous on 2023-08-03

High CVE-2023-4764: Incorrect security UI in BFCache. Reported by Irvan Kurniawan (sourc7) on 2023-05-20

Record
MGASA-2023-0283
Updated
2026-11-02
OSVMGASA-2023-0285 No score

Updated Firefox and Thunderbird packages fix security vulnerabilities

Updated Firefox and Thunderbird packages fix security vulnerabilities:

Out-of-bounds write in PathOps. (CVE-2023-5169)

Use-after-free in Ion Compiler. (CVE-2023-5171)

Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (CVE-2023-5176)

Heap buffer overflow in libvpx. (CVE-2023-5217)

Record
MGASA-2023-0285
Updated
2026-11-02
OSVopenSUSE-SU-2023:0277-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Chromium 117.0.5938.132 (boo#1215776):

    • CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778)
    • CVE-2023-5186: Use after free in Passwords
    • CVE-2023-5187: Use after free in Extensions

  • Chromium 117.0.5938.92:

    • stability improvements
Record
openSUSE-SU-2023:0277-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0297-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 103.0.4928.16

    • CHR-9416 Updating Chromium on desktop-stable-* branches
    • CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89
    • CHR-9449 Update Chromium on desktop-stable-117-4928 to 117.0.5938.132
    • DNA-110337 Opera Intro extension custom versions
    • DNA-111454 Player animations visual adjustments
    • DNA-111618 Turn on #password-generator on all streams
    • DNA-111645 Turn on flag #player-service-react on developer stream
    • DNA-111708 Player home page is shown while music service is being loaded
    • DNA-111722 [Tab strip][Tab island] Add tab in tab island button appears after size of tabs is changed
    • DNA-111727 JsonPrefStore is created twice for Local State file
    • DNA-111838 Promote 103.0 to stable
    • DNA-111845 Turn on flag #player-service-react on all streams
    • DNA-111868 Translations for O103
    • DNA-111874 OMenu and Context Menus has transparent few px border

  • The update to chromium 117.0.5938.89 fixes following issues: CVE-2023-5217, CVE-2023-5186, CVE-2023-5187

  • Complete Opera 103 changelog at: https://blogs.opera.com/desktop/changelog-for-103/

  • Update to 102.0.4880.78

    • DNA-110952 Crash at base::subtle::RefCountedBase:: ReleaseImpl() const

  • Update to 102.0.4880.70

    • DNA-105016 Do not open file selector when closing easy files dialog with 'close this popup' option
    • DNA-110437 Extensions font color in dark mode makes the text not visible
    • DNA-110443 Crash at EasyFilesView::ShowFileSelector
    • DNA-111231 Amazon Music logo update in sidebar Player
    • DNA-111280 Make import from Crypto Browser to Opera Browser easier
    • DNA-111355 [Sidebar] DevTools is not working correctly in with sidebar panel
    • DNA-111708 Player home page is shown while music service is being loaded
    • DNA-111162 Refresh Player home page
    • DNA-111164 Implement animation in Player home page

  • Update to 102.0.4880.56

    • DNA-110785 Crash at static void base::allocator:: UnretainedDanglingRawPtrDetectedDumpWithoutCrashing (unsigned __int64)
    • DNA-110973 Crash after dragging tab from island to another screen
    • DNA-111199 Disable user_education tests from component_unittests
    • DNA-111369 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*)
    • DNA-111538 All new open windows don`t have a close button 'x' in the right upper corner.

  • Changes in 102.0.4880.51

    • CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
    • DNA-110101 [Linux] Maximize/restore button does not work properly
    • DNA-110669 duplicated hints on system buttons
    • DNA-110823 Uninstallation Survey Countries
    • DNA-110881 Scroll bar doesn't change color in dark mode
    • DNA-110930 Capture mouse events on the 1-pixel edge for DevTools
    • DNA-110935 ChatSonic colors are unreadable in Dark Mode
    • DNA-111034 Dynamic icon does not look good in edit-tile-modal
    • DNA-111035 Removal custom-image should restore dynamic icon
    • DNA-111177 [Start page] Letter in SD is black on light wallpaper
    • DNA-111488 Improve profile migration for desktop-stable-116-4880

  • Update to 102.0.4880.46

    • CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
    • DNA-110216 [Sidebar] Straight lines instead of rounded corners
    • DNA-110539 [LIN] Crash at content::WebContentsImpl:: GetLastCommittedURL()
    • DNA-110631 AB test mechanism for Speed Dial
    • DNA-110656 [TabStrip] Memory leak for tab group
    • DNA-111322 Only show splash screen on major version update
    • DNA-111417 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
    • DNA-111420 Update continue on link for euro rtv agd
    • DNA-111440 Crash at opera::component_based:: ComponentTabBar::GetActiveTab()
Record
openSUSE-SU-2023:0297-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0298-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 103.0.4928.16

    • CHR-9416 Updating Chromium on desktop-stable-* branches
    • CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89
    • CHR-9449 Update Chromium on desktop-stable-117-4928 to 117.0.5938.132
    • DNA-110337 Opera Intro extension custom versions
    • DNA-111454 Player animations visual adjustments
    • DNA-111618 Turn on #password-generator on all streams
    • DNA-111645 Turn on flag #player-service-react on developer stream
    • DNA-111708 Player home page is shown while music service is being loaded
    • DNA-111722 [Tab strip][Tab island] Add tab in tab island button appears after size of tabs is changed
    • DNA-111727 JsonPrefStore is created twice for Local State file
    • DNA-111838 Promote 103.0 to stable
    • DNA-111845 Turn on flag #player-service-react on all streams
    • DNA-111868 Translations for O103
    • DNA-111874 OMenu and Context Menus has transparent few px border

  • The update to chromium 117.0.5938.89 fixes following issues: CVE-2023-5217, CVE-2023-5186, CVE-2023-5187

  • Complete Opera 103 changelog at: https://blogs.opera.com/desktop/changelog-for-103/

  • Update to 102.0.4880.78

    • DNA-110952 Crash at base::subtle::RefCountedBase:: ReleaseImpl() const

  • Update to 102.0.4880.70

    • DNA-105016 Do not open file selector when closing easy files dialog with 'close this popup' option
    • DNA-110437 Extensions font color in dark mode makes the text not visible
    • DNA-110443 Crash at EasyFilesView::ShowFileSelector
    • DNA-111231 Amazon Music logo update in sidebar Player
    • DNA-111280 Make import from Crypto Browser to Opera Browser easier
    • DNA-111355 [Sidebar] DevTools is not working correctly in with sidebar panel
    • DNA-111708 Player home page is shown while music service is being loaded
    • DNA-111162 Refresh Player home page
    • DNA-111164 Implement animation in Player home page

  • Update to 102.0.4880.56

    • DNA-110785 Crash at static void base::allocator:: UnretainedDanglingRawPtrDetectedDumpWithoutCrashing (unsigned __int64)
    • DNA-110973 Crash after dragging tab from island to another screen
    • DNA-111199 Disable user_education tests from component_unittests
    • DNA-111369 Crash at views::View::DoRemoveChildView(views:: View*, bool, bool, views::View*)
    • DNA-111538 All new open windows don`t have a close button 'x' in the right upper corner.

  • Changes in 102.0.4880.51

    • CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
    • DNA-110101 [Linux] Maximize/restore button does not work properly
    • DNA-110669 duplicated hints on system buttons
    • DNA-110823 Uninstallation Survey Countries
    • DNA-110881 Scroll bar doesn't change color in dark mode
    • DNA-110930 Capture mouse events on the 1-pixel edge for DevTools
    • DNA-110935 ChatSonic colors are unreadable in Dark Mode
    • DNA-111034 Dynamic icon does not look good in edit-tile-modal
    • DNA-111035 Removal custom-image should restore dynamic icon
    • DNA-111177 [Start page] Letter in SD is black on light wallpaper
    • DNA-111488 Improve profile migration for desktop-stable-116-4880

  • Update to 102.0.4880.46

    • CHR-9416 Automatic tries of updating Chromium on desktop-stable-* branches
    • DNA-110216 [Sidebar] Straight lines instead of rounded corners
    • DNA-110539 [LIN] Crash at content::WebContentsImpl:: GetLastCommittedURL()
    • DNA-110631 AB test mechanism for Speed Dial
    • DNA-110656 [TabStrip] Memory leak for tab group
    • DNA-111322 Only show splash screen on major version update
    • DNA-111417 Crash at opera::component_based:: TabAnimationController::StartAnimatedLayout(opera:: component_based::TabAnimationController::AnimationInfo, base::OnceCallback)
    • DNA-111420 Update continue on link for euro rtv agd
    • DNA-111440 Crash at opera::component_based:: ComponentTabBar::GetActiveTab()
Record
openSUSE-SU-2023:0298-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0365-1 No score

Security update for vlc

This update for vlc fixes the following issues:

Update to version 3.0.20:

  • Video Output:
    • Fix green line in fullscreen in D3D11 video output
    • Fix crash with some AMD drivers old versions
    • Fix events propagation issue when double-clicking with mouse wheel
  • Decoders:
    • Fix crash when AV1 hardware decoder fails
  • Interface:
    • Fix annoying disappearance of the Windows fullscreen controller
  • Demuxers:
    • Fix potential security issue (OOB Write) on MMS:// by checking user size bounds

Update to version 3.0.19:

  • Core:
    • Fix next-frame freezing in most scenarios
  • Demux:
    • Support RIFF INFO tags for Wav files
    • Fix AVI files with flipped RAW video planes
    • Fix duration on short and small Ogg/Opus files
    • Fix some HLS/TS streams with ID3 prefix
    • Fix some HLS playlist refresh drift
    • Fix for GoPro MAX spatial metadata
    • Improve FFmpeg-muxed MP4 chapters handling
    • Improve playback for QNap-produced AVI files
    • Improve playback of some old RealVideo files
    • Fix duration probing on some MP4 with missing information
  • Decoders:
    • Multiple fixes on AAC handling
    • Activate hardware decoding of AV1 on Windows (DxVA)
    • Improve AV1 HDR support with software decoding
    • Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones
    • Fix black screen on poorly edited MP4 files on Android Mediacodec
    • Fix rawvid video in NV12
    • Fix several issues on Windows hardware decoding (including 'too large resolution in DxVA')
    • Improve crunchyroll-produced SSA rendering
  • Video Output:
    • Super Resolution scaling with nVidia and Intel GPUs
    • Fix for an issue when cropping on Direct3D9
    • Multiple fixes for hardware decoding on D3D11 and OpenGL interop
    • Fix an issue when playing -90�rotated video
    • Fix subtitles rendering blur on recent macOS
  • Input:
    • Improve SMB compatibility with Windows 11 hosts
  • Contribs:
    • Update of fluidlite, fixing some MIDI rendering on Windows
    • Update of zlib to 1.2.13 (CVE-2022-37434)
    • Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass
  • Misc:
    • Improve muxing timestamps in a few formats (reset to 0)
    • Fix some rendering issues on Linux with the fullscreen controller
    • Fix GOOM visualization
    • Fixes for Youtube playback
    • Fix some MPRIS inconsistencies that broke some OS widgets on Linux
    • Implement MPRIS TrackList signals
    • Fix opening files in read-only mode
    • Fix password search using the Kwallet backend
    • Fix some crashes on macOS when switching application
    • Fix 5.1/7.1 output on macOS and tvOS
    • Fix several crashes and bugs in the macOS preferences panel
    • Improvements on the threading of the MMDevice audio output on Windows
    • Fix a potential security issue on the uninstaller DLLs
    • Fix memory leaks when using the media_list_player libVLC APIs
  • Translations:
    • Update of most translations
    • New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili
Record
openSUSE-SU-2023:0365-1
Updated
2026-11-02

Affected products

Show 1 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
electron
npm
 before 22.3.25
22.3.25
electron
npm
 24.0.0 up to 24.8.5
24.8.5
electron
npm
 25.0.0 up to 25.8.4
25.8.4
electron
npm
 26.0.0 up to 26.2.4
26.2.4
electron
npm
 27.0.0-alpha.1 up to 27.0.0-beta.8
27.0.0-beta.8
firefox-esr
Alpine:v3.18
 before 115.3.1-r0
115.3.1-r0
firefox-esr
Alpine:v3.19
 before 115.3.1-r0
115.3.1-r0
firefox-esr
Alpine:v3.20
 before 115.3.1-r0
115.3.1-r0
firefox-esr
Alpine:v3.21
 before 115.3.1-r0
115.3.1-r0
firefox-esr
Alpine:v3.22
 before 115.3.1-r0
115.3.1-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.23
 before 115.3.1-r0
115.3.1-r0
libvpx
Alpine:v3.17
 before 1.12.0-r2
1.12.0-r2
libvpx
Alpine:v3.18
 before 1.13.0-r2
1.13.0-r2
libvpx
Alpine:v3.19
 before 1.13.0-r3
1.13.0-r3
libvpx
Alpine:v3.20
 before 1.13.0-r3
1.13.0-r3
libvpx
Alpine:v3.21
 before 1.13.0-r3
1.13.0-r3
libvpx
Alpine:v3.22
 before 1.13.0-r3
1.13.0-r3
libvpx
Alpine:v3.23
 before 1.13.0-r3
1.13.0-r3
libvpx
Alpine:v3.24
 before 1.13.0-r3
1.13.0-r3
qt5-qtwebengine
Alpine:v3.18
 before 5.15.13-r9
5.15.13-r9
qt5-qtwebengine
Alpine:v3.19
 before 5.15.15-r3
5.15.15-r3
qt5-qtwebengine
Alpine:v3.20
 before 5.15.15-r3
5.15.15-r3
qt5-qtwebengine
Alpine:v3.21
 before 5.15.15-r3
5.15.15-r3
qt5-qtwebengine
Alpine:v3.22
 before 5.15.15-r3
5.15.15-r3
qt5-qtwebengine
Alpine:v3.23
 before 5.15.15-r3
5.15.15-r3
firefox
AlmaLinux:9
From an advisory covering 5 CVEs
 before 115.3.1-1.el9_2.alma.1
115.3.1-1.el9_2.alma.1
firefox-x11
AlmaLinux:9
From an advisory covering 5 CVEs
 before 115.3.1-1.el9_2.alma.1
115.3.1-1.el9_2.alma.1
thunderbird
AlmaLinux:9
From an advisory covering 5 CVEs
 before 115.3.1-1.el9_2.alma
115.3.1-1.el9_2.alma
libvpx
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.7.0-10.el8_8.alma.1
1.7.0-10.el8_8.alma.1
libvpx-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.7.0-10.el8_8.alma.1
1.7.0-10.el8_8.alma.1
libvpx
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.9.0-7.el9_2.alma.1
1.9.0-7.el9_2.alma.1
libvpx-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.9.0-7.el9_2.alma.1
1.9.0-7.el9_2.alma.1
chromium
Debian:12
 before 117.0.5938.132-1~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 37 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1~deb11u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1
117.0.5938.132-1~deb12u1
chromium
Debian:13
 before 117.0.5938.132-1
117.0.5938.132-1
chromium
Debian:14
 before 117.0.5938.132-1
117.0.5938.132-1
firefox-esr
Debian:12
 All versions, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
 None known
firefox-esr
Debian:13
 All versions, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1
 None known
firefox-esr
Debian:14
 All versions, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1
 None known
libvpx
Debian:12
 before 1.12.0-1+deb12u1, plus listed versions
1.12.0-1
1.12.0-1+deb12u1
libvpx
Debian:13
 before 1.12.0-1.1
1.12.0-1.1
libvpx
Debian:14
 before 1.12.0-1.1
1.12.0-1.1
thunderbird
Debian:12
 before 1:115.3.1-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 36 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.2.0-11:115.2.2-11:115.3.0-11:115.3.0-1~deb12u11:115.3.1-1~deb10u11:115.3.1-1~deb11u1
1:115.3.1-1~deb12u1
thunderbird
Debian:13
 before 1:115.3.1-1
1:115.3.1-1
thunderbird
Debian:14
 before 1:115.3.1-1
1:115.3.1-1
firefox-esr
Debian:10
 before 115.3.1esr-1~deb10u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1
115.3.1esr-1~deb10u1
libvpx
Debian:10
From an advisory covering 2 CVEs
 before 1.7.0-3+deb10u2, plus listed versions
1.7.0-31.7.0-3+deb10u1
1.7.0-3+deb10u2
thunderbird
Debian:10
From an advisory covering 4 CVEs
 before 1:115.3.1-1~deb10u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1
1:115.3.1-1~deb10u1
chromium
Debian:11
From an advisory covering 3 CVEs
 before 117.0.5938.132-1~deb11u1, plus listed versions
100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1
Show 45 moreShow less
100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1
117.0.5938.132-1~deb11u1
chromium
Debian:12
From an advisory covering 3 CVEs
 before 117.0.5938.132-1~deb12u1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 37 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1~deb11u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1
117.0.5938.132-1~deb12u1
firefox-esr
Debian:11
 before 115.3.1esr-1~deb11u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1
115.3.1esr-1~deb11u1
libvpx
Debian:11
 before 1.9.0-1+deb11u1, plus listed versions
1.9.0-1
1.9.0-1+deb11u1
thunderbird
Debian:11
From an advisory covering 4 CVEs
 before 1:115.3.1-1~deb11u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1
1:115.3.1-1~deb11u1
thunderbird
Debian:12
From an advisory covering 4 CVEs
 before 1:115.3.1-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 36 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.2.0-11:115.2.2-11:115.3.0-11:115.3.0-1~deb12u11:115.3.1-1~deb10u11:115.3.1-1~deb11u1
1:115.3.1-1~deb12u1
LibVPX_jll
Julia
 before 1.15.2+0
1.15.2+0
libvpx
Mageia:8
 before 1.9.0-1.1.mga8
1.9.0-1.1.mga8
libvpx
Mageia:9
 before 1.12.0-1.1.mga9
1.12.0-1.1.mga9
chromium-browser-stable
Mageia:9
From an advisory covering 18 CVEs
 before 117.0.5938.132-1.mga9.tainted
117.0.5938.132-1.mga9.tainted
firefox
Mageia:9
From an advisory covering 4 CVEs
 before 115.3.1-1.mga9
115.3.1-1.mga9
firefox-l10n
Mageia:9
From an advisory covering 4 CVEs
 before 115.3.1-1.mga9
115.3.1-1.mga9
thunderbird
Mageia:9
From an advisory covering 4 CVEs
 before 115.3.1-1.mga9
115.3.1-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 4 CVEs
 before 115.3.1-1.mga9
115.3.1-1.mga9
libvpx
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.7.0-10.oe1
1.7.0-10.oe1
libvpx
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 1.7.0-10.oe1
1.7.0-10.oe1
libvpx
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 1.7.0-10.oe2203sp2
1.7.0-10.oe2203sp2
libvpx
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.7.0-10.oe2203sp1
1.7.0-10.oe2203sp1
libvpx
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 1.7.0-10.oe2203sp2
1.7.0-10.oe2203sp2
firefox
openEuler:20.03-LTS-SP1
 before 79.0-14.oe1
79.0-14.oe1
firefox
openEuler:20.03-LTS-SP3
 before 79.0-14.oe1
79.0-14.oe1
firefox
openEuler:22.03-LTS
 before 102.15.0-3.oe2203sp2
102.15.0-3.oe2203sp2
firefox
openEuler:22.03-LTS-SP1
 before 102.15.0-3.oe2203sp1
102.15.0-3.oe2203sp1
firefox
openEuler:22.03-LTS-SP2
 before 102.15.0-3.oe2203sp2
102.15.0-3.oe2203sp2
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
firefox-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
firefox-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
thunderbird-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_2
0:115.3.1-1.el8_2
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
firefox
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
firefox-x11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
firefox
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
firefox-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
firefox-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_6
0:115.3.1-1.el8_6
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
firefox-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_4
0:115.3.1-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
thunderbird
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
thunderbird-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
thunderbird-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_0
0:115.3.1-1.el9_0
firefox
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_1
0:115.3.1-1.el8_1
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el7_9
0:115.3.1-1.el7_9
libvpx
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-utils-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-utils-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx-utils-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_2
0:1.7.0-8.el8_2
libvpx
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_1
0:1.7.0-8.el8_1
libvpx-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_1
0:1.7.0-8.el8_1
libvpx-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_1
0:1.7.0-8.el8_1
libvpx-utils-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-8.el8_1
0:1.7.0-8.el8_1
libvpx
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-utils-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-utils-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx-utils-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_4
0:1.7.0-10.el8_4
libvpx
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-utils-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-debugsource
Red Hat:rhel_eus:8.6::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-devel
Red Hat:rhel_eus:8.6::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx-utils-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_6
0:1.7.0-10.el8_6
libvpx
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_2
0:1.9.0-7.el9_2
libvpx
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_0
0:1.9.0-7.el9_0
libvpx-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.9.0-7.el9_0
0:1.9.0-7.el9_0
thunderbird
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el8_8
0:115.3.1-1.el8_8
thunderbird
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:115.3.1-1.el9_2
0:115.3.1-1.el9_2
libvpx
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.0-10.el8_8
0:1.7.0-10.el8_8
libvpx
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.3.0-3.12.1
1.3.0-3.12.1
libvpx
SUSE:Linux Enterprise Server 12 SP5
 before 1.3.0-3.12.1
1.3.0-3.12.1
libvpx
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.3.0-3.12.1
1.3.0-3.12.1
libvpx
SUSE:Linux Enterprise Workstation Extension 12 SP5
 before 1.3.0-3.12.1
1.3.0-3.12.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 115.3.1-150000.150.110.1
115.3.1-150000.150.110.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 115.3.1-150000.150.110.1
115.3.1-150000.150.110.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 115.3.1-150000.150.110.1
115.3.1-150000.150.110.1
libvpx
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
openSUSE:Leap 15.4
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
openSUSE:Leap 15.5
 before 1.11.0-150400.3.3.1
1.11.0-150400.3.3.1
libvpx
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Manager Proxy 4.2
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Manager Server 4.2
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
SUSE:Enterprise Storage 7.1
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
libvpx
openSUSE:Leap 15.4
 before 1.6.1-150000.6.11.1
1.6.1-150000.6.11.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
openSUSE:Leap 15.4
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
openSUSE:Leap 15.5
 before 115.3.1-150200.152.111.1
115.3.1-150200.152.111.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 115.3.1-112.185.1
115.3.1-112.185.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
 before 115.3.1-112.185.1
115.3.1-112.185.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 115.3.1-112.185.1
115.3.1-112.185.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
MozillaThunderbird
openSUSE:Leap 15.4
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
MozillaThunderbird
openSUSE:Leap 15.5
From an advisory covering 6 CVEs
 before 115.3.1-150200.8.133.1
115.3.1-150200.8.133.1
libvpx
Ubuntu:Pro:14.04:LTS
 before 1.3.0-2ubuntu0.1~esm3, plus listed versions
1.2.0-21.3.0-11.3.0-21.3.0-2ubuntu0.1~esm11.3.0-2ubuntu0.1~esm2
1.3.0-2ubuntu0.1~esm3
libvpx
Ubuntu:Pro:16.04:LTS
 before 1.5.0-2ubuntu1.1+esm2, plus listed versions
1.4.0-41.5.0-21.5.0-2ubuntu11.5.0-2ubuntu1.11.5.0-2ubuntu1.1+esm1
1.5.0-2ubuntu1.1+esm2
libvpx
Ubuntu:Pro:18.04:LTS
 before 1.7.0-3ubuntu0.18.04.1+esm1, plus listed versions
1.6.1-31.7.0-31.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
firefox
Ubuntu:20.04:LTS
 before 118.0.1+build1-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
118.0.1+build1-0ubuntu0.20.04.1
libvpx
Ubuntu:20.04:LTS
 before 1.8.2-1ubuntu0.2, plus listed versions
1.8.1-21.8.2-11.8.2-1build1
1.8.2-1ubuntu0.2
thunderbird
Ubuntu:20.04:LTS
 before 1:115.3.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 30 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.1
1:115.3.1+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
libvpx
Ubuntu:22.04:LTS
 before 1.11.0-2ubuntu2.2, plus listed versions
1.9.0-1ubuntu11.11.0-2ubuntu11.11.0-2ubuntu2
1.11.0-2ubuntu2.2
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:115.3.1+build1-0ubuntu0.22.04.2, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 19 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.1
1:115.3.1+build1-0ubuntu0.22.04.2
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
thunderbird
Ubuntu:24.04:LTS
 before 1:115.3.1+build1-0ubuntu1
1:115.3.1+build1-0ubuntu1
libvpx
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1.8.2-1ubuntu0.2, plus listed versions
1.8.1-21.8.2-11.8.2-1build1
1.8.2-1ubuntu0.2
libvpx
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 1.11.0-2ubuntu2.2, plus listed versions
1.9.0-1ubuntu11.11.0-2ubuntu11.11.0-2ubuntu2
1.11.0-2ubuntu2.2
libvpx
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 1.7.0-3ubuntu0.18.04.1+esm1, plus listed versions
1.6.1-31.7.0-31.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
libvpx
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 1.5.0-2ubuntu1.1+esm2, plus listed versions
1.4.0-41.5.0-21.5.0-2ubuntu11.5.0-2ubuntu1.11.5.0-2ubuntu1.1+esm1
1.5.0-2ubuntu1.1+esm2
firefox
Ubuntu:20.04:LTS
From an advisory covering 8 CVEs
 before 118.0.1+build1-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
118.0.1+build1-0ubuntu0.20.04.1
thunderbird
Ubuntu:20.04:LTS
From an advisory covering 11 CVEs
 before 1:115.3.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 30 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.1
1:115.3.1+build1-0ubuntu0.20.04.1
thunderbird
Ubuntu:22.04:LTS
From an advisory covering 11 CVEs
 before 1:115.3.1+build1-0ubuntu0.22.04.2, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 19 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.1
1:115.3.1+build1-0ubuntu0.22.04.2
chromium
SUSE:Package Hub 15 SP4
From an advisory covering 3 CVEs
 before 117.0.5938.132-bp155.2.40.1
117.0.5938.132-bp155.2.40.1
chromium
SUSE:Package Hub 15 SP5
From an advisory covering 3 CVEs
 before 117.0.5938.132-bp155.2.40.1
117.0.5938.132-bp155.2.40.1
chromium
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 117.0.5938.132-bp155.2.40.1
117.0.5938.132-bp155.2.40.1
chromium
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 117.0.5938.132-bp155.2.40.1
117.0.5938.132-bp155.2.40.1
opera
openSUSE:Leap 15.5 NonFree
From an advisory covering 3 CVEs
 before 103.0.4928.16-lp155.3.12.1
103.0.4928.16-lp155.3.12.1
opera
openSUSE:Leap 15.4 NonFree
From an advisory covering 3 CVEs
 before 103.0.4928.16-lp154.2.53.1
103.0.4928.16-lp154.2.53.1
vlc
SUSE:Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 3.0.20-bp154.2.6.1
3.0.20-bp154.2.6.1
vlc
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 3.0.20-bp154.2.6.1
3.0.20-bp154.2.6.1
vlc
SUSE:Package Hub 15 SP5
From an advisory covering 3 CVEs
 before 3.0.20-bp155.2.3.1
3.0.20-bp155.2.3.1
vlc
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 3.0.20-bp155.2.3.1
3.0.20-bp155.2.3.1
chromium
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 117.0.5938.132-1.1
117.0.5938.132-1.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 118.0.1-1.1
118.0.1-1.1
libvpx
openSUSE:Tumbleweed
 before 1.13.0-2.1
1.13.0-2.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 115.3.1-1.1
115.3.1-1.1
nodejs-electron
openSUSE:Tumbleweed
 before 25.8.4-2.1
25.8.4-2.1
vlc
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.0.19-1.1
3.0.19-1.1
element-desktop
openSUSE:Tumbleweed
 before 1.11.47-1.1
1.11.47-1.1
shotcut
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 23.11.29-1.1
23.11.29-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubTrinadh465/platform_external_libvpx_v1.4.0_CVE-2023-52172023-10-06
PoC in GitHubTrinadh465/platform_external_libvpx_v1.8.0_CVE-2023-52172023-10-06
PoC in GitHubUT-Security/cve-2023-5217-poc2023-10-06

History

History
RecordedChangedSources
affected
exploitation
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5217 is a high vulnerability (CVSS 8.8) in Google Chrome, published September 28, 2023. CISA lists it as known to be exploited, since October 2, 2023. EUVD reports exploitation since October 2, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 49.0%, the 98th percentile. Fixed in electron 22.3.25.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 package rows, 1,013 versions and 1,888 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 28 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open