Every CVE Search/ Get API key

CVE-2026-4684

Race condition, use-after-free in the Graphics: WebRender component

7.5 HighFix available

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.37%Up 0.4 points since Mar 25, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Race condition, use-after-free in the Graphics: WebRender component

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Record
CVE-2026-4684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-362, CWE-364
Updated
2026-11-02
EUVDEUVD-2026-14792 7.5

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Record
EUVD-2026-14792
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3rrq-fwhx-9wq4 7.5

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects...

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

Record
GHSA-3rrq-fwhx-9wq4
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-364
Updated
2026-11-02
NVD 7.5

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Record
CVE-2026-4684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-416, CWE-364
Updated
2026-11-02
OSVDEBIAN-CVE-2026-4684 7.5

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Record
DEBIAN-CVE-2026-4684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1705 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4698)

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4699)

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4700)

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4701)

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4702)

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4704)

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR…

Record
OESA-2026-1705
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 44 moreShow less
OSVOESA-2026-1706 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4698)

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4699)

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4700)

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4701)

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4702)

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4704)

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR…

Record
OESA-2026-1706
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1707 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4698)

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4699)

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4700)

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4701)

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4702)

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4704)

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR…

Record
OESA-2026-1707
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1708 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4698)

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4699)

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4700)

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4701)

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4702)

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4704)

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR…

Record
OESA-2026-1708
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1709 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4698)

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.(CVE-2026-4699)

Mitigation bypass in the Networking: HTTP component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4700)

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4701)

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4702)

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.(CVE-2026-4704)

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR…

Record
OESA-2026-1709
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1993 10.0

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.(CVE-2026-3889)

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.(CVE-2026-4371)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR <…

Record
OESA-2026-1993
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1994 10.0

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.(CVE-2026-3889)

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.(CVE-2026-4371)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4690)

Use-after-free in the CSS Parsing and Computation component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4691)

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4692)

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4693)

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.(CVE-2026-4694)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4695)

Use-after-free in the Layout: Text and Fonts component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4696)

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.(CVE-2026-4697)

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR <…

Record
OESA-2026-1994
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:5930 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:5930
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:5931 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:5931
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:5932 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:5932
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:6188 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:6188
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:6342 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:6342
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:6917 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:6917
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:7837 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7837
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7838 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7838
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7839 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7839
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7840 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7840
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7841 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7841
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7842 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7842
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7843 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7843
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7845 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7845
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:7858 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:7858
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:8284 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8284
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8285 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8285
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8286 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8286
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8287 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8287
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8288 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8288
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8289 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8289
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8290 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8290
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8315 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8315
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:8427 7.5

Red Hat Security Advisory: firefox security update

Record
RHSA-2026:8427
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:8850 8.2

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2026:8850
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:5930 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox:…

Record
RLSA-2026:5930
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:5931 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox:…

Record
RLSA-2026:5931
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:5932 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox:…

Record
RLSA-2026:5932
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:6188 8.2

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary…

Record
RLSA-2026:6188
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:6342 8.2

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary…

Record
RLSA-2026:6342
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:6917 8.2

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)

  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)

  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)

  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)

  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)

  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)

  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)

  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)

  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)

  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)

  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)

  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)

  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)

  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)

  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary…

Record
RLSA-2026:6917
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-4684 7.5

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Record
UBUNTU-CVE-2026-4684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:5930 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling…
Record
ALSA-2026:5930
Updated
2026-11-02
OSVALSA-2026:5931 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling…
Record
ALSA-2026:5931
Updated
2026-11-02
OSVALSA-2026:5932 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling…
Record
ALSA-2026:5932
Updated
2026-11-02
OSVALSA-2026:6188 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  • firefox: thunderbird:…
Record
ALSA-2026:6188
Updated
2026-11-02
OSVALSA-2026:6342 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  • firefox: thunderbird:…
Record
ALSA-2026:6342
Updated
2026-11-02
OSVALSA-2026:6917 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  • firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  • firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  • firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  • firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  • firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  • firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  • firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  • firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  • firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  • firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  • firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  • firefox: thunderbird:…
Record
ALSA-2026:6917
Updated
2026-11-02

Affected products

Show 9 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
firefox
AlmaLinux:9
From an advisory covering 37 CVEs
 before 140.9.0-1.el9_7.alma.1
140.9.0-1.el9_7.alma.1
firefox-x11
AlmaLinux:9
From an advisory covering 37 CVEs
 before 140.9.0-1.el9_7.alma.1
140.9.0-1.el9_7.alma.1
firefox
AlmaLinux:10
From an advisory covering 37 CVEs
 before 140.9.0-1.el10_1
140.9.0-1.el10_1
firefox
AlmaLinux:8
From an advisory covering 37 CVEs
 before 140.9.0-1.el8_10.alma.1
140.9.0-1.el8_10.alma.1
thunderbird
AlmaLinux:9
From an advisory covering 39 CVEs
 before 140.9.0-1.el9_7.alma.1
140.9.0-1.el9_7.alma.1
thunderbird
AlmaLinux:10
From an advisory covering 39 CVEs
 before 140.9.0-1.el10_1.alma.1
140.9.0-1.el10_1.alma.1
thunderbird
AlmaLinux:8
From an advisory covering 39 CVEs
 before 140.9.0-1.el8_10.alma.1
140.9.0-1.el8_10.alma.1
firefox-esr
Debian:12
 before 140.9.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
140.9.0esr-1~deb12u1
firefox-esr
Debian:13
 before 140.9.0esr-1~deb13u1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 33 moreShow less
140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1140.7.0esr-1140.7.0esr-1~deb11u1140.7.0esr-1~deb12u1140.7.0esr-1~deb13u1140.8.0esr-1140.8.0esr-1~deb11u1140.8.0esr-1~deb12u1140.8.0esr-1~deb13u1140.9.0esr-1~deb11u1140.9.0esr-1~deb12u1
140.9.0esr-1~deb13u1
firefox-esr
Debian:14
 before 140.9.0esr-1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 34 moreShow less
140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1140.7.0esr-1140.7.0esr-1~deb11u1140.7.0esr-1~deb12u1140.7.0esr-1~deb13u1140.8.0esr-1140.8.0esr-1~deb11u1140.8.0esr-1~deb12u1140.8.0esr-1~deb13u1140.9.0esr-1~deb11u1140.9.0esr-1~deb12u1140.9.0esr-1~deb13u1
140.9.0esr-1
Show 160 moreShow less
Affected packages
PackageAffectedFixed
thunderbird
Debian:12
 before 1:140.9.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:140.9.0esr-1~deb12u1
thunderbird
Debian:13
 before 1:140.9.0esr-1~deb13u1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 42 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-11:140.6.0esr-1~deb11u11:140.6.0esr-1~deb12u11:140.6.0esr-1~deb13u11:140.7.0esr-11:140.7.0esr-1~deb11u11:140.7.0esr-1~deb12u11:140.7.0esr-1~deb13u11:140.7.1esr-11:140.7.1esr-1~deb11u11:140.7.1esr-1~deb12u11:140.7.1esr-1~deb13u11:140.8.0esr-11:140.8.0esr-1~deb11u11:140.8.0esr-1~deb12u11:140.8.0esr-1~deb13u11:140.9.0esr-1~deb11u11:140.9.0esr-1~deb12u1
1:140.9.0esr-1~deb13u1
thunderbird
Debian:14
 before 1:140.9.0esr-1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 43 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-11:140.6.0esr-1~deb11u11:140.6.0esr-1~deb12u11:140.6.0esr-1~deb13u11:140.7.0esr-11:140.7.0esr-1~deb11u11:140.7.0esr-1~deb12u11:140.7.0esr-1~deb13u11:140.7.1esr-11:140.7.1esr-1~deb11u11:140.7.1esr-1~deb12u11:140.7.1esr-1~deb13u11:140.8.0esr-11:140.8.0esr-1~deb11u11:140.8.0esr-1~deb12u11:140.8.0esr-1~deb13u11:140.9.0esr-1~deb11u11:140.9.0esr-1~deb12u11:140.9.0esr-1~deb13u1
1:140.9.0esr-1
firefox-esr
Debian:11
From an advisory covering 36 CVEs
 before 140.9.0esr-1~deb11u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1
140.9.0esr-1~deb11u1
thunderbird
Debian:11
From an advisory covering 38 CVEs
 before 1:140.9.0esr-1~deb11u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1
1:140.9.0esr-1~deb11u1
firefox-esr
Debian:12
From an advisory covering 36 CVEs
 before 140.9.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
140.9.0esr-1~deb12u1
firefox-esr
Debian:13
From an advisory covering 36 CVEs
 before 140.9.0esr-1~deb13u1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 31 moreShow less
140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1140.3.1esr-2140.4.0esr-1140.4.0esr-1~deb11u1140.4.0esr-1~deb12u1140.4.0esr-1~deb13u1140.5.0esr-1140.5.0esr-1~deb11u1140.5.0esr-1~deb12u1140.5.0esr-1~deb13u1140.6.0esr-1140.6.0esr-1~deb11u1140.6.0esr-1~deb12u1140.6.0esr-1~deb13u1140.7.0esr-1140.7.0esr-1~deb11u1140.7.0esr-1~deb12u1140.7.0esr-1~deb13u1140.8.0esr-1140.8.0esr-1~deb11u1140.8.0esr-1~deb12u1140.8.0esr-1~deb13u1
140.9.0esr-1~deb13u1
thunderbird
Debian:12
From an advisory covering 38 CVEs
 before 1:140.9.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:140.9.0esr-1~deb12u1
thunderbird
Debian:13
From an advisory covering 38 CVEs
 before 1:140.9.0esr-1~deb13u1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 41 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.2.0esr-11:140.3.0esr-11:140.3.0esr-1~deb11u11:140.3.0esr-1~deb12u11:140.3.0esr-1~deb13u11:140.3.1esr-11:140.4.0esr-11:140.4.0esr-1~deb11u11:140.4.0esr-1~deb12u11:140.4.0esr-1~deb13u11:140.5.0esr-11:140.5.0esr-1~deb11u11:140.5.0esr-1~deb12u11:140.5.0esr-1~deb13u11:140.6.0esr-11:140.6.0esr-1~deb11u11:140.6.0esr-1~deb12u11:140.6.0esr-1~deb13u11:140.7.0esr-11:140.7.0esr-1~deb11u11:140.7.0esr-1~deb12u11:140.7.0esr-1~deb13u11:140.7.1esr-11:140.7.1esr-1~deb11u11:140.7.1esr-1~deb12u11:140.7.1esr-1~deb13u11:140.8.0esr-11:140.8.0esr-1~deb11u11:140.8.0esr-1~deb12u11:140.8.0esr-1~deb13u11:140.9.0esr-1~deb11u1
1:140.9.0esr-1~deb13u1
nss
Mageia:9
From an advisory covering 38 CVEs
 before 3.122.0-1.mga9
3.122.0-1.mga9
firefox
Mageia:9
From an advisory covering 38 CVEs
 before 140.9.0-1.mga9
140.9.0-1.mga9
firefox-l10n
Mageia:9
From an advisory covering 38 CVEs
 before 140.9.0-1.mga9
140.9.0-1.mga9
thunderbird
Mageia:9
From an advisory covering 39 CVEs
 before 140.9.0-1.mga9
140.9.0-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 39 CVEs
 before 140.9.0-1.mga9
140.9.0-1.mga9
firefox
openEuler:24.03-LTS
From an advisory covering 38 CVEs
 before 140.9.0-1.oe2403
140.9.0-1.oe2403
firefox
openEuler:24.03-LTS-SP1
From an advisory covering 38 CVEs
 before 140.9.0-1.oe2403sp1
140.9.0-1.oe2403sp1
firefox
openEuler:24.03-LTS-SP2
From an advisory covering 38 CVEs
 before 140.9.0-1.oe2403sp2
140.9.0-1.oe2403sp2
firefox
openEuler:24.03-LTS-SP3
From an advisory covering 38 CVEs
 before 140.9.0-1.oe2403sp3
140.9.0-1.oe2403sp3
firefox
openEuler:22.03-LTS-SP4
From an advisory covering 38 CVEs
 before 140.9.0-1.oe2203sp4
140.9.0-1.oe2203sp4
thunderbird
openEuler:24.03-LTS-SP2
From an advisory covering 40 CVEs
 before 140.9.1-1.oe2403sp2
140.9.1-1.oe2403sp2
thunderbird
openEuler:24.03-LTS-SP3
From an advisory covering 40 CVEs
 before 140.9.1-1.oe2403sp3
140.9.1-1.oe2403sp3
firefox
Red Hat:enterprise_linux:9::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
firefox-x11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
firefox
Red Hat:enterprise_linux:10.1
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
firefox-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
firefox-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
thunderbird
Red Hat:enterprise_linux:10.1
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
thunderbird-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
thunderbird-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
firefox
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
firefox-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
firefox-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
firefox-x11
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
firefox
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
firefox
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
firefox-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
firefox-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
firefox
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
firefox-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
firefox-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
firefox-x11
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
firefox
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
firefox
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
firefox-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
firefox-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
firefox
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
firefox-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
firefox-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
firefox-x11
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
thunderbird-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
thunderbird-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_6
0:140.9.0-1.el9_6
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_2
0:140.9.0-1.el8_2
thunderbird
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
thunderbird-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
thunderbird-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_0
0:140.9.0-1.el9_0
thunderbird
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
thunderbird-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
thunderbird-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_2
0:140.9.0-1.el9_2
thunderbird
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_8
0:140.9.0-1.el8_8
thunderbird
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_6
0:140.9.0-1.el8_6
thunderbird
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
thunderbird-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
thunderbird-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_4
0:140.9.0-1.el9_4
thunderbird
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
thunderbird-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
thunderbird-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_0
0:140.9.0-1.el10_0
firefox
Red Hat:rhel_els:7
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el7_9
0:140.9.0-1.el7_9
firefox-debuginfo
Red Hat:rhel_els:7
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el7_9
0:140.9.0-1.el7_9
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_4
0:140.9.0-1.el8_4
firefox
Rocky Linux:9
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
firefox
Rocky Linux:10
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
firefox
Rocky Linux:8
From an advisory covering 37 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
thunderbird
Rocky Linux:9
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el9_7
0:140.9.0-1.el9_7
thunderbird
Rocky Linux:10
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el10_1
0:140.9.0-1.el10_1
thunderbird
Rocky Linux:8
From an advisory covering 39 CVEs
 before 0:140.9.0-1.el8_10
0:140.9.0-1.el8_10
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 140.9.0-150200.152.225.1
140.9.0-150200.152.225.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 38 CVEs
 before 140.9.0-112.304.2
140.9.0-112.304.2
MozillaFirefox
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 38 CVEs
 before 140.9.0-112.304.2
140.9.0-112.304.2
MozillaThunderbird
openSUSE:Leap 15.6
From an advisory covering 40 CVEs
 before 140.9.0-150200.8.263.1
140.9.0-150200.8.263.1
MozillaFirefox
SUSE:Linux Enterprise Server 16.0
From an advisory covering 38 CVEs
 before 140.9.0-160000.1.1
140.9.0-160000.1.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 38 CVEs
 before 140.9.0-160000.1.1
140.9.0-160000.1.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 34 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1
 None known
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
mozjs115
Ubuntu:24.04:LTS
 All versions, plus listed versions
115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4
Show 4 moreShow less
115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1
 None known
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 38 CVEs
 before 140.9.0-1.1
140.9.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
 before 140.9.0-1.1
140.9.0-1.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 46 CVEs
 before 149.0-1.1
149.0-1.1
MozillaFirefox
openSUSE:Leap 16.0
From an advisory covering 38 CVEs
 before 140.9.0-160000.1.1
140.9.0-160000.1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-4684 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published March 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in firefox-esr 140.9.0esr-1~deb12u1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 966 versions, 168 references and the rest of 19 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 11 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open