CVE-2026-15718

Invalid pointer in the JavaScript: WebAssembly component

4.3 MediumPublic exploitFix available

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: None

Exploit likelihood

0.32%Up 0.2 points since Jul 15, 2026

What each source reports

CVE List Score used 4.3

Invalid pointer in the JavaScript: WebAssembly component

Record: CVE-2026-15718
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-763
Updated: 2026-11-02

EUVDEUVD-2026-43662 4.3

Record: EUVD-2026-43662
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-6f82-p732-9cp8 4.3

We are aware that exploit code for this is public however we are not aware of any attacks in the...

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.

Record: GHSA-6f82-p732-9cp8
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-763
Updated: 2026-11-02

NVD 4.3

Record: CVE-2026-15718
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-763
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-15718 4.3

Record: DEBIAN-CVE-2026-15718
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVOESA-2026-3195 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.(CVE-2026-14899)

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16349)

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16350)

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16351)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16352)

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16354)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16355)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16358)

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16359)

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16360)

Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.(CVE-2026-16361)

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed…

Record: OESA-2026-3195
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVOESA-2026-3196 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed…

Record: OESA-2026-3196
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3225 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo

Security Fix(es):

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Record: OESA-2026-3225
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3226 10.0

firefox security update

Security Fix(es):

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Record: OESA-2026-3226
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3227 10.0

firefox security update

Security Fix(es):

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Record: OESA-2026-3227
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3228 10.0

firefox security update

Security Fix(es):

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16353)

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16357)

Record: OESA-2026-3228
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:47101 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:47101
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:47104 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:47104
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:47105 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:47105
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:49621 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:49621
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:49921 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:49921
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:49922 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:49922
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53444 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53444
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53445 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53445
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53446 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53446
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53453 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53453
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53454 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53454
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53455 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53455
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:53475 8.8

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2026:53475
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54180 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54180
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54181 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54181
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54182 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54182
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54185 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54185
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54248 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54248
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54249 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54249
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54259 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54259
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54339 8.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2026:54339
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:47101 8.8

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47101
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:47104 8.8

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)
firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47104
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:47105 8.8

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)
firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:47105
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:49621 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:49621
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:49921 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:49921
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:49922 8.8

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:49922
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-15718 4.3

Record: UBUNTU-CVE-2026-15718
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVALSA-2026:47101 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47101
Updated: 2026-11-02

OSVALSA-2026:47104 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)
firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47104
Updated: 2026-11-02

OSVALSA-2026:47105 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)
firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:47105
Updated: 2026-11-02

OSVALSA-2026:49621 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:49621
Updated: 2026-11-02

OSVALSA-2026:49921 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:49921
Updated: 2026-11-02

OSVALSA-2026:49922 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)
firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)
firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)
firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)
firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)
firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)
firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)
firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)
firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)
firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)
firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)
firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)
firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)
firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)
firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)
firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)
firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)
firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:49922
Updated: 2026-11-02

OSVCLSA-2026-1785839724 No score

thunderbird: Fix of 35 CVEs

update to 140.13.0 ESR (MFSA 2026-72; includes MFSA 2026-64 / 140.12.1 fixes)
CVE-2026-14899: The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird
CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. Exploit code for this issue is public
CVE-2026-15719: Site isolation issue in the DOM: Navigation component. Exploit code for this issue is public
CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component
CVE-2026-16354: Information disclosure in the Graphics: ImageLib component
CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16357: Incorrect boundary conditions in the Graphics component
CVE-2026-16358: Site isolation issue in the Graphics: WebRender component
CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component
CVE-2026-16360: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code
CVE-2026-16361: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code
CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component
CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
CVE-2026-16371: Privilege escalation in the DOM: Navigation component
CVE-2026-16374: Information disclosure in the Framework component in DevTools
CVE-2026-16375: Site isolation issue in the Networking: HTTP component
CVE-2026-16377: Mitigation bypass in the PDF Viewer component
CVE-2026-16379: Privilege escalation in the DOM: Content Processes component
CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component
CVE-2026-16383: Mitigation bypass in the DOM: Networking component
CVE-2026-16387: Site isolation issue in the Networking component
CVE-2026-16390: Mitigation bypass in the Enterprise Policies component
CVE-2026-16391: Information disclosure in the Storage: IndexedDB component
CVE-2026-16396: Privilege escalation in WebExtensions
CVE-2026-16405: Information disclosure in the Networking: WebSockets component
CVE-2026-16412: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code
CVE-2026-57962: Memory exhaustion via a malicious LDAP address-book server
CVE-2026-57963: Content injection via HTML chat messages (Matrix/XMPP)

Record: CLSA-2026-1785839724
Updated: 2026-11-02

OSVMGASA-2026-0325 No score

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one.

Record: MGASA-2026-0325
Updated: 2026-11-02

OSVMGASA-2026-0326 No score

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix various security issues. See the links to get complete information of each issue.

Record: MGASA-2026-0326
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11311-1 No score

MozillaFirefox-152.0.6-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-152.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11311-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11329-1 No score

firefox-esr-140.13.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11329-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11359-1 No score

MozillaThunderbird-140.13.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11359-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21519-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.13.0 ESR.
- MFSA 2026-70 (bsc#1271649):
  - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component
  - CVE-2026-15719: Site isolation issue in the DOM: Navigation component
  - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
  - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
  - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
  - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
  - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
  - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component
  - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component
  - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component
  - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
  - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
  - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16357: Incorrect boundary conditions in the Graphics component
  - CVE-2026-16371: Privilege escalation in the DOM: Navigation component
  - CVE-2026-16374: Information disclosure in the Framework component in DevTools
  - CVE-2026-16375: Site isolation issue in the Networking: HTTP component
  - CVE-2026-16377: Mitigation bypass in the PDF Viewer component
  - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component
  - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component
  - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component
  - CVE-2026-16383: Mitigation bypass in the DOM: Networking component
  - CVE-2026-16387: Site isolation issue in the Networking component
  - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component
  - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component
  - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component
  - CVE-2026-16396: Privilege escalation in WebExtensions
  - CVE-2026-16405: Information disclosure in the Networking: WebSockets component
  - CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13
Remove obsolete mozilla-nss-certs (bsc#1269226).

Record: openSUSE-SU-2026:21519-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23115-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.13.0 ESR.
- MFSA 2026-70 (bsc#1271649):
  - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component
  - CVE-2026-15719: Site isolation issue in the DOM: Navigation component
  - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
  - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
  - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
  - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
  - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
  - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component
  - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component
  - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component
  - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
  - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
  - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16357: Incorrect boundary conditions in the Graphics component
  - CVE-2026-16371: Privilege escalation in the DOM: Navigation component
  - CVE-2026-16374: Information disclosure in the Framework component in DevTools
  - CVE-2026-16375: Site isolation issue in the Networking: HTTP component
  - CVE-2026-16377: Mitigation bypass in the PDF Viewer component
  - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component
  - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component
  - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component
  - CVE-2026-16383: Mitigation bypass in the DOM: Networking component
  - CVE-2026-16387: Site isolation issue in the Networking component
  - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component
  - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component
  - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component
  - CVE-2026-16396: Privilege escalation in WebExtensions
  - CVE-2026-16405: Information disclosure in the Networking: WebSockets component
  - CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13
Remove obsolete mozilla-nss-certs (bsc#1269226).

Record: SUSE-SU-2026:23115-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23137-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 140.13.0 ESR.
- MFSA 2026-70 (bsc#1271649):
  - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component
  - CVE-2026-15719: Site isolation issue in the DOM: Navigation component
  - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
  - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component
  - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
  - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component
  - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
  - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component
  - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component
  - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component
  - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
  - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
  - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component
  - CVE-2026-16357: Incorrect boundary conditions in the Graphics component
  - CVE-2026-16371: Privilege escalation in the DOM: Navigation component
  - CVE-2026-16374: Information disclosure in the Framework component in DevTools
  - CVE-2026-16375: Site isolation issue in the Networking: HTTP component
  - CVE-2026-16377: Mitigation bypass in the PDF Viewer component
  - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component
  - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component
  - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component
  - CVE-2026-16383: Mitigation bypass in the DOM: Networking component
  - CVE-2026-16387: Site isolation issue in the Networking component
  - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component
  - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component
  - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component
  - CVE-2026-16396: Privilege escalation in WebExtensions
  - CVE-2026-16405: Information disclosure in the Networking: WebSockets component
  - CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
  - CVE-2026-16361: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13
Remove obsolete mozilla-nss-certs (bsc#1269226).

Record: SUSE-SU-2026:23137-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` AlmaLinux:10	before 140.13.0-1.el10_2	140.13.0-1.el10_2
`firefox` AlmaLinux:9	before 140.13.0-1.el9_8.alma.1	140.13.0-1.el9_8.alma.1
`firefox-x11` AlmaLinux:9	before 140.13.0-1.el9_8.alma.1	140.13.0-1.el9_8.alma.1
`firefox` AlmaLinux:8	before 140.13.0-1.el8_10.alma.1	140.13.0-1.el8_10.alma.1
`thunderbird` AlmaLinux:10	before 140.13.0-1.el10_2.alma.1	140.13.0-1.el10_2.alma.1
`thunderbird` AlmaLinux:9	before 140.13.0-1.el9_8.alma.1	140.13.0-1.el9_8.alma.1
`thunderbird` AlmaLinux:8	before 140.13.0-1.el8_10.alma.1	140.13.0-1.el8_10.alma.1
`thunderbird` TuxCare:AlmaLinux:9.2	before 140.13.0-1.el9_2.alma.1.tuxcare.els1	140.13.0-1.el9_2.alma.1.tuxcare.els1
`firefox-esr` Debian:12	before 140.13.0esr-1~deb12u1, plus listed versions 102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1 Show 45 moreShow less 102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1	140.13.0esr-1~deb12u1
`firefox-esr` Debian:13	before 140.13.0esr-1~deb13u1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1	140.13.0esr-1~deb13u1

Show 143 moreShow less

Affected packages
Package	Affected	Fixed
`firefox-esr` Debian:14	before 140.13.0esr-1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1	140.13.0esr-1
`thunderbird` Debian:12	before 1:140.13.0esr-2~deb12u1, plus listed versions 1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1 Show 45 moreShow less 1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1	1:140.13.0esr-2~deb12u1
`thunderbird` Debian:13	before 1:140.13.0esr-2~deb13u1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u1	1:140.13.0esr-2~deb13u1
`thunderbird` Debian:14	before 1:140.13.0esr-1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-1	1:140.13.0esr-1
`rootcerts` Mageia:10	before 20260714.00-1.mga10	20260714.00-1.mga10
`nss` Mageia:10	before 3.126.0-1.mga10	3.126.0-1.mga10
`firefox` Mageia:10	before 140.13.0-1.mga10	140.13.0-1.mga10
`firefox-l10n` Mageia:10	before 140.13.0-1.mga10	140.13.0-1.mga10
`rootcerts` Mageia:9	before 20260714.00-1.mga9	20260714.00-1.mga9
`nss` Mageia:9	before 3.126.0-1.mga9	3.126.0-1.mga9
`firefox` Mageia:9	before 140.13.0-1.mga9	140.13.0-1.mga9
`firefox-l10n` Mageia:9	before 140.13.0-1.mga9	140.13.0-1.mga9
`thunderbird` Mageia:10	before 140.13.0-1.mga10	140.13.0-1.mga10
`thunderbird-l10n` Mageia:10	before 140.13.0-1.mga10	140.13.0-1.mga10
`thunderbird` Mageia:9	before 140.13.0-1.mga9	140.13.0-1.mga9
`thunderbird-l10n` Mageia:9	before 140.13.0-1.mga9	140.13.0-1.mga9
`thunderbird` openEuler:24.03-LTS-SP4	before 140.13.0-1.oe2403sp4	140.13.0-1.oe2403sp4
`thunderbird` openEuler:24.03-LTS-SP3	before 140.13.0-1.oe2403sp3	140.13.0-1.oe2403sp3
`firefox` openEuler:24.03-LTS-SP1	before 140.13.0-2.oe2403sp1	140.13.0-2.oe2403sp1
`firefox` openEuler:24.03-LTS-SP3	before 140.13.0-2.oe2403sp3	140.13.0-2.oe2403sp3
`firefox` openEuler:24.03-LTS-SP4	before 140.13.0-2.oe2403sp4	140.13.0-2.oe2403sp4
`firefox` openEuler:22.03-LTS-SP4	before 140.13.0-2.oe2203sp4	140.13.0-2.oe2203sp4
`firefox` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`firefox-debuginfo` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`firefox-debugsource` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`firefox` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`firefox-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`firefox-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`firefox-x11` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`firefox` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`firefox-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`firefox-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`thunderbird` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`thunderbird-debuginfo` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`thunderbird-debugsource` Red Hat:enterprise_linux:10.2	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`thunderbird` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`thunderbird-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`thunderbird-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`thunderbird` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`thunderbird-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`thunderbird-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`thunderbird` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`thunderbird-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`thunderbird-debugsource` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`thunderbird` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`thunderbird-debuginfo` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`thunderbird-debugsource` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`thunderbird` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`thunderbird-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`thunderbird-debugsource` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`thunderbird` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`thunderbird` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird-debugsource` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird-debuginfo` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird-debugsource` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`thunderbird` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`thunderbird` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`thunderbird-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`thunderbird-debugsource` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`firefox` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:140.13.0-1.el8_4	0:140.13.0-1.el8_4
`firefox` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`firefox-debuginfo` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`firefox-debugsource` Red Hat:enterprise_linux_eus:10.0	before 0:140.13.0-1.el10_0	0:140.13.0-1.el10_0
`firefox` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`firefox-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`firefox-debugsource` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`firefox-x11` Red Hat:rhel_e4s:9.4::appstream	before 0:140.13.0-1.el9_4	0:140.13.0-1.el9_4
`firefox` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`firefox-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`firefox-debugsource` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`firefox-x11` Red Hat:rhel_e4s:9.2::appstream	before 0:140.13.0-1.el9_2	0:140.13.0-1.el9_2
`firefox` Red Hat:rhel_els:7	before 0:140.13.0-1.el7_9	0:140.13.0-1.el7_9
`firefox-debuginfo` Red Hat:rhel_els:7	before 0:140.13.0-1.el7_9	0:140.13.0-1.el7_9
`firefox` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`firefox-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`firefox-debugsource` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`firefox-x11` Red Hat:rhel_eus:9.6::appstream	before 0:140.13.0-1.el9_6	0:140.13.0-1.el9_6
`firefox` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox-debugsource` Red Hat:rhel_aus:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:140.13.0-1.el8_6	0:140.13.0-1.el8_6
`firefox` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox-debuginfo` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox-debugsource` Red Hat:rhel_e4s:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox-debuginfo` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox-debugsource` Red Hat:rhel_tus:8.8::appstream	before 0:140.13.0-1.el8_8	0:140.13.0-1.el8_8
`firefox` Rocky Linux:10	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`firefox` Rocky Linux:9	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`firefox` Rocky Linux:8	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`thunderbird` Rocky Linux:10	before 0:140.13.0-1.el10_2	0:140.13.0-1.el10_2
`thunderbird` Rocky Linux:9	before 0:140.13.0-1.el9_8	0:140.13.0-1.el9_8
`thunderbird` Rocky Linux:8	before 0:140.13.0-1.el8_10	0:140.13.0-1.el8_10
`MozillaFirefox` SUSE:Linux Enterprise Server 16.0	before 140.13.0-160000.1.1	140.13.0-160000.1.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP applications 16.0	before 140.13.0-160000.1.1	140.13.0-160000.1.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 140.13.0-112.324.2	140.13.0-112.324.2
`MozillaFirefox` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 140.13.0-112.324.2	140.13.0-112.324.2
`MozillaFirefox` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP5-LTSS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP5	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 140.13.0-150200.152.248.1	140.13.0-150200.152.248.1
`MozillaThunderbird` SUSE:Linux Enterprise Module for Package Hub 15 SP7	before 140.13.0-150200.8.280.1	140.13.0-150200.8.280.1
`MozillaThunderbird` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 140.13.0-150200.8.280.1	140.13.0-150200.8.280.1
`mozjs52` Ubuntu:18.04:LTS	All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1	None known
`mozjs38` Ubuntu:18.04:LTS	All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4	None known
`mozjs68` Ubuntu:20.04:LTS	All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1	None known
`mozjs52` Ubuntu:20.04:LTS	All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3	None known
`mozjs102` Ubuntu:22.04:LTS	All versions, plus listed versions 102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1	None known
`mozjs78` Ubuntu:22.04:LTS	All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1	None known
`mozjs91` Ubuntu:22.04:LTS	All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1	None known
`thunderbird` Ubuntu:22.04:LTS	All versions, plus listed versions 1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1 Show 34 moreShow less 1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1	None known
`mozjs102` Ubuntu:24.04:LTS	All versions, plus listed versions 102.15.1-1102.15.1-3ubuntu2	None known
`mozjs115` Ubuntu:24.04:LTS	All versions, plus listed versions 115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4 Show 4 moreShow less 115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1	None known
`MozillaFirefox` openSUSE:Tumbleweed	before 152.0.6-1.1	152.0.6-1.1
`firefox-esr` openSUSE:Tumbleweed	before 140.13.0-1.1	140.13.0-1.1
`MozillaThunderbird` openSUSE:Tumbleweed	before 140.13.0-1.1	140.13.0-1.1
`MozillaFirefox` openSUSE:Leap 16.0	before 140.13.0-160000.1.1	140.13.0-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	SneakyNachos/CVE-2026-15718-who-put-ptrs-in-my-wasm	2026-08-23

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-15718 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published July 14, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in firefox 140.13.0-1.el10_2.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 392 versions, 129 references and the rest of 6 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 3 source records.