Every CVE Search/ Get API key

CVE-2026-12291

Use-after-free in the Networking: HTTP component

8.8 HighFix available

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.38%Up 0.2 points since Jun 17, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.8

Use-after-free in the Networking: HTTP component

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Record
CVE-2026-12291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
EUVDEUVD-2026-37082 8.8

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Record
EUVD-2026-37082
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-cvpf-j74m-qjrj 8.8

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152,...

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.

Record
GHSA-cvpf-j74m-qjrj
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
NVD 8.8

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Record
CVE-2026-12291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
OSVDEBIAN-CVE-2026-12291 8.8

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Record
DEBIAN-CVE-2026-12291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2735 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12289)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12290)

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12291)

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12292)

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12294)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12295)

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12296)

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12297)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12298)

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12299)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12302)

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12304)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12305)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12306)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12307)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12308)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12309)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12310)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12311)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12312)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…

Record
OESA-2026-2735
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVOESA-2026-2736 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12289)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12290)

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12291)

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12292)

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12294)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12295)

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12296)

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12297)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12298)

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12299)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12302)

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12304)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12305)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12306)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12307)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12308)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12309)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12310)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12311)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12312)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…

Record
OESA-2026-2736
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2737 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12289)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12290)

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12291)

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12292)

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12294)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12295)

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12296)

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12297)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12298)

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12299)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12302)

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12304)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12305)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12306)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12307)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12308)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12309)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12310)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12311)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12312)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…

Record
OESA-2026-2737
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2756 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12289)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12290)

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12291)

Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12292)

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12294)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12295)

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12296)

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12297)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12298)

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12299)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12302)

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12304)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12305)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12306)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12307)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12308)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12309)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12310)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12311)

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12312)

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.(CVE-2026-12313)

Memory safety bug fixed in Firefox 152. This vulnerability was…

Record
OESA-2026-2756
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27717 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:27717
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27733 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:27733
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27734 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:27734
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:29940 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:29940
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30846 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:30846
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33445 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:33445
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36100 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:36100
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36101 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:36101
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36102 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:36102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:36103 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:36103
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:37210 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:37210
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:37391 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:37391
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38506 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:38506
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38750 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:38750
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38751 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:38751
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:38753 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:38753
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39011 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:39011
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39141 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:39141
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39142 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:39142
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39428 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:39428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:39706 7.5

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:39706
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27717 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27717
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27733 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27733
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:27734 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:27734
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:29940 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:29940
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:30846 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:30846
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:33445 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)

  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)

  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)

  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)

  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)

  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)

  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)

  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)

  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)

  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)

  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)

  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)

  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33445
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-12291 8.8

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

Record
UBUNTU-CVE-2026-12291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:27717 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27717
Updated
2026-11-02
OSVALSA-2026:27733 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27733
Updated
2026-11-02
OSVALSA-2026:27734 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27734
Updated
2026-11-02
OSVALSA-2026:29940 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:29940
Updated
2026-11-02
OSVALSA-2026:30846 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30846
Updated
2026-11-02
OSVALSA-2026:33445 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  • firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  • firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  • firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  • firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  • firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  • firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  • firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  • firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  • firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  • firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  • firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33445
Updated
2026-11-02
OSVCLSA-2026-1783520633 No score

thunderbird: Fix of 6 CVEs

  • CVE-2026-12290: WebGL2 missing per-stage uniform-block validation could let a malicious shader exceed driver limits; opt into ANGLE's validatePerStageMaxUniformBlocks and wire MaxVertex/Fragment uniform block counts (Bug 2024852, includes ANGLE cherry-pick 05459080c9a3)
  • CVE-2026-12291: use-after-free in HTTP stream listener chain; hold a strong nsCOMPtr<nsIStreamListener> ref across OnStartRequest/ OnDataAvailable/OnStopRequest invocations across 45 callsites (Bug 2036929)
  • CVE-2026-12292: ThreadSharedFloatArrayBufferList::Create returned uninitialized memory; switch js_pod_malloc to js_pod_calloc for the Web Audio float buffer (Bug 2038465)
  • CVE-2026-12294: SharedWorker remote-type confusion; simplify SharedWorker remote type handling by sourcing the remote type from the content process instead of recomputing in parent (Bug 2039873)
  • CVE-2026-12295: sandbox escape via srcdoc data on non-about:srcdoc URIs; add MOZ_RELEASE_ASSERT/IPC reject guards in nsDocShell, nsDocShellLoadState, Document and nsViewSourceChannel (Bug 2040160)
  • CVE-2026-12297: nsStandardURL deserialization could over-read past the spec buffer; add authority/path NS_ENSURE_TRUE consistency check in Deserialize() and null-pointer guard in Finalize() (Bug 2041610, includes prereq Bug 2027976 isSubSegment ladder)
Record
CLSA-2026-1783520633
Updated
2026-11-02
OSVMGASA-2026-0242 No score

Updated firefox, firefox-l10n, rootcerts, nss packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. (CVE-2026-12289) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12290) Use-after-free in the Networking: HTTP component. (CVE-2026-12291) Incorrect boundary conditions in the Web Audio component. (CVE-2026-12292) Sandbox escape in the DOM: Workers component. (CVE-2026-12294) Sandbox escape in the DOM: Navigation component. (CVE-2026-12295) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12298) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12296) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-12297) JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12329) Mitigation bypass in the DOM: Security component. (CVE-2026-12302) Same-origin policy bypass in the Networking: Cookies component. (CVE-2026-12304) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12305) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12306) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12307) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12308) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12309) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12310) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12311) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12312) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12313) Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12314) Mitigation bypass in the DOM: Security component. (CVE-2026-12315) Incorrect boundary conditions in the Internationalization component. (CVE-2026-12330) Incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-12324) Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325) Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12327) Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12328)

Record
MGASA-2026-0242
Updated
2026-11-02
OSVMGASA-2026-0243 No score

Updated thunderbird thunderbird-l10n packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. (CVE-2026-12289) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12290) Use-after-free in the Networking: HTTP component. (CVE-2026-12291) Incorrect boundary conditions in the Web Audio component. (CVE-2026-12292) Sandbox escape in the DOM: Workers component. (CVE-2026-12294) Sandbox escape in the DOM: Navigation component. (CVE-2026-12295) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12298) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12296) Sandbox escape due to incorrect boundary conditions in the Networking component. (CVE-2026-12297) JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12329) Mitigation bypass in the DOM: Security component. (CVE-2026-12302) Same-origin policy bypass in the Networking: Cookies component. (CVE-2026-12304) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12305) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12306) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12307) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12308) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12309) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12310) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12311) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12312) Information disclosure, sandbox escape in the Security: Process Sandboxing component. (CVE-2026-12313) Memory safety bug fixed in Thunderbird ESR 140.12. (CVE-2026-12314) Mitigation bypass in the DOM: Security component. (CVE-2026-12315) Incorrect boundary conditions in the Internationalization component. (CVE-2026-12330) Incorrect boundary conditions in the Graphics: CanvasWebGL component. (CVE-2026-12324) Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325) Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12327) Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152. (CVE-2026-12328) Denial-of-service via malicious LDAP address-book server. (CVE-2026-57962) Chat UI manipulation by injection. (CVE-2026-57963)

Record
MGASA-2026-0243
Updated
2026-11-02
OSVMGASA-2026-0326 No score

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix various security issues. See the links to get complete information of each issue.

Record
MGASA-2026-0326
Updated
2026-11-02
OSVopenSUSE-SU-2026:11052-1 No score

MozillaFirefox-152.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11052-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11055-1 No score

firefox-esr-140.12.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11055-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11072-1 No score

MozillaThunderbird-140.12.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11072-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21043-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issue

Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):

  • CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
  • CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12291: Use-after-free in the Networking: HTTP component.
  • CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
  • CVE-2026-12294: Sandbox escape in the DOM: Workers component.
  • CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
  • CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
  • CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
  • CVE-2026-12302: Mitigation bypass in the DOM: Security component.
  • CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
  • CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12315: Mitigation bypass in the DOM: Security component.
  • CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
  • CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
  • CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
  • CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
  • CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.
Record
openSUSE-SU-2026:21043-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21168-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Changes in MozillaThunderbird:

  • Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 (bsc#1268071)

    • CVE-2026-12289 (bmo#2023443) Privilege escalation in the Graphics: WebRender component
    • CVE-2026-12290 (bmo#2024852) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12291 (bmo#2036929) Use-after-free in the Networking: HTTP component
    • CVE-2026-12292 (bmo#2038465) Incorrect boundary conditions in the Web Audio component
    • CVE-2026-12294 (bmo#2039873) Sandbox escape in the DOM: Workers component
    • CVE-2026-12295 (bmo#2040160) Sandbox escape in the DOM: Navigation component
    • CVE-2026-12298 (bmo#2041981) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12296 (bmo#2040515) Sandbox escape in the Security: Process Sandboxing component
    • CVE-2026-12297 (bmo#2041610) Sandbox escape due to incorrect boundary conditions in the Networking component
    • CVE-2026-12299 (bmo#2043139) JIT miscompilation in the DOM: Core & HTML component
    • CVE-2026-12329 (bmo#2044738) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12302 (bmo#2034489) Mitigation bypass in the DOM: Security component
    • CVE-2026-12304 (bmo#2034944) Same-origin policy bypass in the Networking: Cookies component
    • CVE-2026-12305 (bmo#2037290) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12306 (bmo#2037323) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12307 (bmo#2038133) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12308 (bmo#2038302) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12309 (bmo#2038476) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12310 (bmo#2039707) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12311 (bmo#2040177) Information disclosure, sandbox escape in the Security: Process Sandboxing component
    • CVE-2026-12312 (bmo#2040383) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12313 (bmo#2040477) Information disclosure, sandbox escape in the Security: Process Sandboxing component
    • CVE-2026-12314 (bmo#2041856) Memory safety bug fixed in Thunderbird ESR 140.12
    • CVE-2026-12315 (bmo#2042058) Mitigation bypass in the DOM: Security component
    • CVE-2026-12330 (bmo#2029326) Incorrect boundary conditions in the Internationalization component
    • CVE-2026-12324 (bmo#2038444) Incorrect boundary conditions in the Graphics: CanvasWebGL component
    • CVE-2026-12325 (bmo#2039443) Denial-of-service in the Graphics: ImageLib component
    • CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312, bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995, bmo#2038551, bmo#2040717, bmo#2042724) Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152
    • CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373, bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929, bmo#2042965, bmo#2043213) Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

  • Mozilla Thunderbird 140.11.0 ESR MFSA 2026-51 (bsc#1265212)

    • CVE-2026-8946 (bmo#2029070) Incorrect boundary conditions in the Audio/Video: Web Codecs component
    • CVE-2026-8388 (bmo#2036978) Incorrect boundary conditions in the JavaScript Engine: JIT component
    • CVE-2026-8947 (bmo#2038439) Use-after-free in the DOM: Bindings (WebIDL) component
    • CVE-2026-8391 (bmo#2038575) Other issue in the JavaScript Engine component
    • CVE-2026-8401 (bmo#2038679) Sandbox escape in the Profile Backup component
    • CVE-2026-8949 (bmo#1355639) Integer overflow in the Widget: Win32 component
    • CVE-2026-8950 (bmo#1965430) Same-origin policy bypass in the…
Record
openSUSE-SU-2026:21168-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21519-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Update to Firefox Extended Support Release 140.13.0 ESR.
    • MFSA 2026-70 (bsc#1271649):
      • CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component
      • CVE-2026-15719: Site isolation issue in the DOM: Navigation component
      • CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
      • CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
      • CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
      • CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
      • CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
      • CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
      • CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component
      • CVE-2026-16354: Information disclosure in the Graphics: ImageLib component
      • CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component
      • CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
      • CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
      • CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component
      • CVE-2026-16357: Incorrect boundary conditions in the Graphics component
      • CVE-2026-16371: Privilege escalation in the DOM: Navigation component
      • CVE-2026-16374: Information disclosure in the Framework component in DevTools
      • CVE-2026-16375: Site isolation issue in the Networking: HTTP component
      • CVE-2026-16377: Mitigation bypass in the PDF Viewer component
      • CVE-2026-16379: Privilege escalation in the DOM: Content Processes component
      • CVE-2026-16358: Site isolation issue in the Graphics: WebRender component
      • CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component
      • CVE-2026-16383: Mitigation bypass in the DOM: Networking component
      • CVE-2026-16387: Site isolation issue in the Networking component
      • CVE-2026-16390: Mitigation bypass in the Enterprise Policies component
      • CVE-2026-16391: Information disclosure in the Storage: IndexedDB component
      • CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component
      • CVE-2026-16396: Privilege escalation in WebExtensions
      • CVE-2026-16405: Information disclosure in the Networking: WebSockets component
      • CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
      • CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
      • CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13
  • Remove obsolete mozilla-nss-certs (bsc#1269226).
Record
openSUSE-SU-2026:21519-1
Updated
2026-11-02
OSVSUSE-SU-2026:22351-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issue

Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071):

  • CVE-2026-12289: Privilege escalation in the Graphics: WebRender component.
  • CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12291: Use-after-free in the Networking: HTTP component.
  • CVE-2026-12292: Incorrect boundary conditions in the Web Audio component.
  • CVE-2026-12294: Sandbox escape in the DOM: Workers component.
  • CVE-2026-12295: Sandbox escape in the DOM: Navigation component.
  • CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component.
  • CVE-2026-12298: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component.
  • CVE-2026-12302: Mitigation bypass in the DOM: Security component.
  • CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component.
  • CVE-2026-12305: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12306: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12307: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12308: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12309: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12310: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12312: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component.
  • CVE-2026-12314: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12315: Mitigation bypass in the DOM: Security component.
  • CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component.
  • CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component.
  • CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
  • CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
  • CVE-2026-12329: Memory safety bug fixed in Firefox ESR 140.12.
  • CVE-2026-12330: Incorrect boundary conditions in the Internationalization component.
Record
SUSE-SU-2026:22351-1
Updated
2026-11-02

Affected products

Show 6 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
firefox
AlmaLinux:8
From an advisory covering 29 CVEs
 before 140.12.0-1.el8_10.alma.1
140.12.0-1.el8_10.alma.1
firefox
AlmaLinux:10
From an advisory covering 29 CVEs
 before 140.12.0-1.el10_2
140.12.0-1.el10_2
firefox
AlmaLinux:9
From an advisory covering 29 CVEs
 before 140.12.0-1.el9_8.alma.1
140.12.0-1.el9_8.alma.1
firefox-x11
AlmaLinux:9
From an advisory covering 29 CVEs
 before 140.12.0-1.el9_8.alma.1
140.12.0-1.el9_8.alma.1
thunderbird
AlmaLinux:9
From an advisory covering 29 CVEs
 before 140.12.0-1.el9_8.alma.1
140.12.0-1.el9_8.alma.1
thunderbird
AlmaLinux:10
From an advisory covering 29 CVEs
 before 140.12.0-1.el10_2.alma.1
140.12.0-1.el10_2.alma.1
thunderbird
AlmaLinux:8
From an advisory covering 29 CVEs
 before 140.12.0-1.el8_10.alma.1
140.12.0-1.el8_10.alma.1
thunderbird
TuxCare:AlmaLinux:9.2
From an advisory covering 6 CVEs
 before 115.4.1-1.el9_2.alma.tuxcare.els17
115.4.1-1.el9_2.alma.tuxcare.els17
firefox-esr
Debian:12
 before 140.12.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
140.12.0esr-1~deb12u1
firefox-esr
Debian:13
 before 140.12.0esr-1~deb13u1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1140.7.0esr-1140.7.0esr-1~deb11u1140.7.0esr-1~deb12u1140.7.0esr-1~deb13u1
140.12.0esr-1~deb13u1
Show 149 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Debian:14
 before 140.12.0esr-1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1140.7.0esr-1140.7.0esr-1~deb11u1140.7.0esr-1~deb12u1
140.12.0esr-1
thunderbird
Debian:12
 before 1:140.12.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:140.12.0esr-1~deb12u1
thunderbird
Debian:13
 before 1:140.12.0esr-1~deb13u1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 45 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-11:140.6.0esr-1~deb11u11:140.6.0esr-1~deb12u1
1:140.12.0esr-1~deb13u1
thunderbird
Debian:14
 before 1:140.12.0esr-1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 45 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-11:140.6.0esr-1~deb11u1
1:140.12.0esr-1
rootcerts
Mageia:10
From an advisory covering 29 CVEs
 before 20260611.00-1.mga10
20260611.00-1.mga10
nss
Mageia:10
From an advisory covering 29 CVEs
 before 3.125.0-1.mga10
3.125.0-1.mga10
firefox
Mageia:10
From an advisory covering 29 CVEs
 before 140.12.0-1.mga10
140.12.0-1.mga10
firefox-l10n
Mageia:10
From an advisory covering 29 CVEs
 before 140.12.0-1.mga10
140.12.0-1.mga10
rootcerts
Mageia:9
From an advisory covering 29 CVEs
 before 20260611.00-1.mga9
20260611.00-1.mga9
nss
Mageia:9
From an advisory covering 29 CVEs
 before 3.125.0-1.mga9
3.125.0-1.mga9
firefox
Mageia:9
From an advisory covering 29 CVEs
 before 140.12.0-1.mga9
140.12.0-1.mga9
firefox-l10n
Mageia:9
From an advisory covering 29 CVEs
 before 140.12.0-1.mga9
140.12.0-1.mga9
thunderbird
Mageia:10
From an advisory covering 31 CVEs
 before 140.12.1-1.mga10
140.12.1-1.mga10
thunderbird-l10n
Mageia:10
From an advisory covering 31 CVEs
 before 140.12.1-1.mga10
140.12.1-1.mga10
thunderbird
Mageia:9
From an advisory covering 31 CVEs
 before 140.12.1-1.mga9
140.12.1-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 31 CVEs
 before 140.12.1-1.mga9
140.12.1-1.mga9
thunderbird
Mageia:10
From an advisory covering 64 CVEs
 before 140.13.0-1.mga10
140.13.0-1.mga10
thunderbird-l10n
Mageia:10
From an advisory covering 64 CVEs
 before 140.13.0-1.mga10
140.13.0-1.mga10
thunderbird
Mageia:9
From an advisory covering 64 CVEs
 before 140.13.0-1.mga9
140.13.0-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 64 CVEs
 before 140.13.0-1.mga9
140.13.0-1.mga9
firefox
openEuler:22.03-LTS-SP4
From an advisory covering 29 CVEs
 before 140.12.0-1.oe2203sp4
140.12.0-1.oe2203sp4
firefox
openEuler:24.03-LTS-SP1
From an advisory covering 29 CVEs
 before 140.12.0-1.oe2403sp1
140.12.0-1.oe2403sp1
firefox
openEuler:24.03-LTS-SP3
From an advisory covering 29 CVEs
 before 140.12.0-1.oe2403sp3
140.12.0-1.oe2403sp3
thunderbird
openEuler:24.03-LTS-SP3
From an advisory covering 49 CVEs
 before 140.12.0-1.oe2403sp3
140.12.0-1.oe2403sp3
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
firefox
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
firefox-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
firefox-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
firefox
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
firefox-x11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
thunderbird-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
thunderbird-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
firefox
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
firefox-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
firefox-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
firefox
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
firefox-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
firefox-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
firefox-x11
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
firefox
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
firefox
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox-debugsource
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
firefox
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
firefox-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
firefox-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
firefox-x11
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
firefox
Red Hat:rhel_els:7
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el7_9
0:140.12.0-1.el7_9
firefox-debuginfo
Red Hat:rhel_els:7
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el7_9
0:140.12.0-1.el7_9
thunderbird
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
thunderbird-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
thunderbird-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_6
0:140.12.0-1.el9_6
thunderbird
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
thunderbird-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
thunderbird-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_0
0:140.12.0-1.el10_0
thunderbird
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
thunderbird-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
thunderbird-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
firefox
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
firefox-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
firefox-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
firefox-x11
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_4
0:140.12.0-1.el9_4
thunderbird
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_6
0:140.12.0-1.el8_6
thunderbird
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_8
0:140.12.0-1.el8_8
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_4
0:140.12.0-1.el8_4
thunderbird
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
thunderbird-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
thunderbird-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_2
0:140.12.0-1.el9_2
firefox
Rocky Linux:8
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
firefox
Rocky Linux:10
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
firefox
Rocky Linux:9
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird
Rocky Linux:9
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el9_8
0:140.12.0-1.el9_8
thunderbird
Rocky Linux:10
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el10_2
0:140.12.0-1.el10_2
thunderbird
Rocky Linux:8
From an advisory covering 29 CVEs
 before 0:140.12.0-1.el8_10
0:140.12.0-1.el8_10
MozillaFirefox
SUSE:Linux Enterprise Server 16.0
From an advisory covering 29 CVEs
 before 140.12.0-160000.1.1
140.12.0-160000.1.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 29 CVEs
 before 140.12.0-160000.1.1
140.12.0-160000.1.1
MozillaFirefox
SUSE:Linux Enterprise Server 16.0
From an advisory covering 61 CVEs
 before 140.13.0-160000.1.1
140.13.0-160000.1.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 61 CVEs
 before 140.13.0-160000.1.1
140.13.0-160000.1.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-112.321.1
140.12.0-112.321.1
MozillaFirefox
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 29 CVEs
 before 140.12.0-112.321.1
140.12.0-112.321.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 29 CVEs
 before 140.12.0-150200.152.245.1
140.12.0-150200.152.245.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 29 CVEs
 before 140.12.0-150200.8.277.1
140.12.0-150200.8.277.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 29 CVEs
 before 140.12.0-150200.8.277.1
140.12.0-150200.8.277.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 34 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1
 None known
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
mozjs115
Ubuntu:24.04:LTS
 All versions, plus listed versions
115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4
Show 4 moreShow less
115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1
 None known
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
 before 152.0-1.1
152.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 29 CVEs
 before 140.12.0-1.1
140.12.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 29 CVEs
 before 140.12.0-1.1
140.12.0-1.1
MozillaFirefox
openSUSE:Leap 16.0
From an advisory covering 29 CVEs
 before 140.12.0-160000.1.1
140.12.0-160000.1.1
MozillaThunderbird
openSUSE:Leap 16.0
From an advisory covering 56 CVEs
 before 140.12.0-bp160.1.1
140.12.0-bp160.1.1
MozillaFirefox
openSUSE:Leap 16.0
From an advisory covering 61 CVEs
 before 140.13.0-160000.1.1
140.13.0-160000.1.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-12291 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published June 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in firefox-esr 140.12.0esr-1~deb12u1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 369 versions, 167 references and the rest of 5 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 6 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open