CVE-2026-100772

Use-after-free in the DOM: Core & HTML component

8.8 HighFix available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.31%Unchanged since Sep 30, 2026

What each source reports

CVE List Score used 8.8

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Record: CVE-2026-100772
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2026-88924 8.8

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Record: EUVD-2026-88924
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w83r-p2vc-2rvf 8.8

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153...

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

Record: GHSA-w83r-p2vc-2rvf
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 8.8

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Record: CVE-2026-100772
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-100772 8.8

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Record: DEBIAN-CVE-2026-100772
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4296 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100756)

Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100757)

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100758)

Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100759)

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100762)

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100766)

Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100767)

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.(CVE-2026-100769)

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100771)

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.(CVE-2026-100772)

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100773)

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100774)

Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100775)

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.(CVE-2026-100777)

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in…

Record: OESA-2026-4296
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Show 29 moreShow less

OSVOESA-2026-4297 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in…

Record: OESA-2026-4297
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4298 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in…

Record: OESA-2026-4298
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4299 10.0

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in…

Record: OESA-2026-4299
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4409 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird…

Record: OESA-2026-4409
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-4410 9.8

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird…

Record: OESA-2026-4410
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:76761 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox:…

Record: RLSA-2026:76761
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:76764 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox:…

Record: RLSA-2026:76764
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:76850 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox:…

Record: RLSA-2026:76850
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:80674 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780)
firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767)

*…

Record: RLSA-2026:80674
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:80694 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780)
firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767)

*…

Record: RLSA-2026:80694
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:90913 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML…

Record: RLSA-2026:90913
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-100772 8.8

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Record: UBUNTU-CVE-2026-100772
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:76761 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB…

Record: ALSA-2026:76761
Updated: 2026-11-02

OSVALSA-2026:76764 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB…

Record: ALSA-2026:76764
Updated: 2026-11-02

OSVALSA-2026:76850 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB…

Record: ALSA-2026:76850
Updated: 2026-11-02

OSVALSA-2026:80674 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780)
firefox: thunderbird: Use-after-free in the…

Record: ALSA-2026:80674
Updated: 2026-11-02

OSVALSA-2026:80694 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780)
firefox: thunderbird: Use-after-free in the…

Record: ALSA-2026:80694
Updated: 2026-11-02

OSVALSA-2026:90913 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832)
firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784)
firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794)
firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777)
firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779)
firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807)
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792)
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776)
firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757)
firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786)
firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770)
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791)
firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818)
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782)
firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772)
firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759)
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778)
firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758)
firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775)
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781)
firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774)
firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803)
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789)
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785)
firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821)
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788)
firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771)
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762)
firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790)
firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773)
firefox: thunderbird:…

Record: ALSA-2026:90913
Updated: 2026-11-02

OSVCLSA-2026-1792779937 No score

thunderbird: Fix of 56 CVEs

update to 153.5.0 ESR (MFSA 2026-103 for 153.4, MFSA 2026-110 for 153.5)
drop CVE-2026-100779-CVE-2026-100785.patch and CVE-2026-100781.patch, their fixes are part of 153.5.0
stop packaging rnp-cli and rnpkeys: upstream no longer installs them (bug 2068130); librnp.so is still shipped
regenerate langpacks from the 153.5.0esr release xpi set (66 languages, the same set as 153.3.1esr)
CVE-2026-103500: Heap buffer overflow opening large email
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component
CVE-2026-100757: Use-after-free in the Widget component
CVE-2026-100758: Sandbox escape in the DOM: Navigation component
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100766: Information disclosure in the Networking: JAR component
CVE-2026-100767: Use-after-free in the Networking: Cache component
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component
CVE-2026-100771: Undefined behavior in the DOM: Streams component
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component
CVE-2026-100775: Sandbox escape in the Graphics component
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component
CVE-2026-100779: Use-after-free in the XSLT component
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component
CVE-2026-100783: Uninitialized memory in the Audio/Video component
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component
CVE-2026-100787: Sandbox escape in the XUL component
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100790: Use-after-free in the XSLT component
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component
CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component
CVE-2026-96869: Information disclosure in the Networking component
CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-100801: Privilege escalation in the DLL Services component
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component
CVE-2026-100807: Privilege escalation in the DOM: Service Workers component
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component
CVE-2026-100809: Same-origin policy bypass in the DevTools component
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component
CVE-2026-100812:…

Record: CLSA-2026-1792779937
Updated: 2026-11-02

OSVMGASA-2026-0491 No score

Updated nss & firefox packages fix security vulnerabilities

Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100780) Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. (CVE-2026-100781) Privilege escalation due to incorrect boundary conditions in the Graphics component. (CVE-2026-100782) Uninitialized memory in the Audio/Video component. (CVE-2026-100783) Use-after-free in the Layout: Text and Fonts component. (CVE-2026-100784) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100785) Sandbox escape due to use-after-free in the Graphics component. (CVE-2026-100786) Sandbox escape in the XUL component. (CVE-2026-100787) Invalid pointer in the JavaScript: WebAssembly component. (CVE-2026-100788) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100789) Use-after-free in the XSLT component. (CVE-2026-100790) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100791) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100832) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-100792) Sandbox escape due to incorrect boundary conditions in the Internationalization component. (CVE-2026-100794) Information disclosure in the Networking component. (CVE-2026-96869) Privilege escalation due to use-after-free in the Graphics: WebRender component. (CVE-2026-100797) Cryptography misuse in Storage: Quota Manager component. (CVE-2026-100798) Sandbox escape due to use-after-free in the Disability Access APIs component. (CVE-2026-100800) Privilege escalation in the DLL Services component. (CVE-2026-100801) Same-origin policy bypass in the WebExtensions component. (CVE-2026-100803) Uninitialized memory in the Graphics: WebGPU component. (CVE-2026-100806) Privilege escalation in the DOM: Service Workers component. (CVE-2026-100807) Mitigation bypass in the DOM: Service Workers component. (CVE-2026-100808) Same-origin policy bypass in the DevTools component. (CVE-2026-100809) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100811) Denial-of-service in the Graphics component. (CVE-2026-100812) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-100814) Use-after-free in the CSS Parsing and Computation component. (CVE-2026-100815) Site isolation issue in the DOM: Networking component. (CVE-2026-100816) Sandbox escape due to use-after-free in the Widget: Gtk component. (CVE-2026-100818) Sandbox escape due to incorrect boundary conditions in the XPCOM component. (CVE-2026-100819)…

Record: MGASA-2026-0491
Updated: 2026-11-02

OSVMGASA-2026-0492 No score

Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. (CVE-2026-103500) Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100780) Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. (CVE-2026-100781) Privilege escalation due to incorrect boundary conditions in the Graphics component. (CVE-2026-100782) Uninitialized memory in the Audio/Video component. (CVE-2026-100783) Use-after-free in the Layout: Text and Fonts component. (CVE-2026-100784) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100785) Sandbox escape due to use-after-free in the Graphics component. (CVE-2026-100786) Sandbox escape in the XUL component. (CVE-2026-100787) Invalid pointer in the JavaScript: WebAssembly component. (CVE-2026-100788) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100789) Use-after-free in the XSLT component. (CVE-2026-100790) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100791) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100832) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-100792) Sandbox escape due to incorrect boundary conditions in the Internationalization component. (CVE-2026-100794) Information disclosure in the Networking component. (CVE-2026-96869) Privilege escalation due to use-after-free in the Graphics: WebRender component. (CVE-2026-100797) Cryptography misuse in Storage: Quota Manager component. (CVE-2026-100798) Sandbox escape due to use-after-free in the Disability Access APIs component. (CVE-2026-100800) Privilege escalation in the DLL Services component. (CVE-2026-100801) Same-origin policy bypass in the WebExtensions component. (CVE-2026-100803) Uninitialized memory in the Graphics: WebGPU component. (CVE-2026-100806) Privilege escalation in the DOM: Service Workers component. (CVE-2026-100807) Mitigation bypass in the DOM: Service Workers component. (CVE-2026-100808) Same-origin policy bypass in the DevTools component. (CVE-2026-100809) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100811) Denial-of-service in the Graphics component. (CVE-2026-100812) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-100814) Use-after-free in the CSS Parsing and Computation component. (CVE-2026-100815) Site isolation issue in the DOM: Networking component. (CVE-2026-100816) Sandbox escape due to use-after-free in the Widget: Gtk component. (CVE-2026-100818) Sandbox escape due to incorrect…

Record: MGASA-2026-0492
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11917-1 No score

firefox-esr-153.4.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11917-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12097-1 No score

MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12097-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12098-1 No score

MozillaThunderbird-153.4.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12098-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:21980-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929):

CVE-2026-96869: Information disclosure in the Networking component.
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.
CVE-2026-100757: Use-after-free in the Widget component.
CVE-2026-100758: Sandbox escape in the DOM: Navigation component.
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100766: Information disclosure in the Networking: JAR component.
CVE-2026-100767: Use-after-free in the Networking: Cache component.
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100771: Undefined behavior in the DOM: Streams component.
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100775: Sandbox escape in the Graphics component.
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100779: Use-after-free in the XSLT component.
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.
CVE-2026-100783: Uninitialized memory in the Audio/Video component.
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.
CVE-2026-100787: Sandbox escape in the XUL component.
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100790: Use-after-free in the XSLT component.
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.
CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.
CVE-2026-100801: Privilege escalation in the DLL Services component.
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.
CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.
CVE-2026-100809: Same-origin policy bypass in the DevTools component.
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100812: Denial-of-service in the Graphics component.
CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.
CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.
CVE-2026-100816: Site isolation issue in the DOM: Networking component.
CVE-2026-100818: Sandbox escape due to use-after-free in…

Record: openSUSE-SU-2026:21980-1
Updated: 2026-11-02

OSVSUSE-SU-2026:23981-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929):

CVE-2026-96869: Information disclosure in the Networking component.
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.
CVE-2026-100757: Use-after-free in the Widget component.
CVE-2026-100758: Sandbox escape in the DOM: Navigation component.
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100766: Information disclosure in the Networking: JAR component.
CVE-2026-100767: Use-after-free in the Networking: Cache component.
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100771: Undefined behavior in the DOM: Streams component.
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100775: Sandbox escape in the Graphics component.
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100779: Use-after-free in the XSLT component.
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.
CVE-2026-100783: Uninitialized memory in the Audio/Video component.
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.
CVE-2026-100787: Sandbox escape in the XUL component.
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100790: Use-after-free in the XSLT component.
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.
CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.
CVE-2026-100801: Privilege escalation in the DLL Services component.
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.
CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.
CVE-2026-100809: Same-origin policy bypass in the DevTools component.
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100812: Denial-of-service in the Graphics component.
CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.
CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.
CVE-2026-100816: Site isolation issue in the DOM: Networking component.
CVE-2026-100818: Sandbox escape due to use-after-free in…

Record: SUSE-SU-2026:23981-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4543-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929):

CVE-2026-96869: Information disclosure in the Networking component.
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.
CVE-2026-100757: Use-after-free in the Widget component.
CVE-2026-100758: Sandbox escape in the DOM: Navigation component.
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100766: Information disclosure in the Networking: JAR component.
CVE-2026-100767: Use-after-free in the Networking: Cache component.
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100771: Undefined behavior in the DOM: Streams component.
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100775: Sandbox escape in the Graphics component.
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100779: Use-after-free in the XSLT component.
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.
CVE-2026-100783: Uninitialized memory in the Audio/Video component.
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.
CVE-2026-100787: Sandbox escape in the XUL component.
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100790: Use-after-free in the XSLT component.
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.
CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.
CVE-2026-100801: Privilege escalation in the DLL Services component.
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.
CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.
CVE-2026-100809: Same-origin policy bypass in the DevTools component.
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100812: Denial-of-service in the Graphics component.
CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.
CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.
CVE-2026-100816: Site isolation issue in the DOM: Networking component.
CVE-2026-100818: Sandbox escape due to use-after-free in…

Record: SUSE-SU-2026:4543-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4545-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929):

CVE-2026-96869: Information disclosure in the Networking component.
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.
CVE-2026-100757: Use-after-free in the Widget component.
CVE-2026-100758: Sandbox escape in the DOM: Navigation component.
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100766: Information disclosure in the Networking: JAR component.
CVE-2026-100767: Use-after-free in the Networking: Cache component.
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.
CVE-2026-100771: Undefined behavior in the DOM: Streams component.
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100775: Sandbox escape in the Graphics component.
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100779: Use-after-free in the XSLT component.
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.
CVE-2026-100783: Uninitialized memory in the Audio/Video component.
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.
CVE-2026-100787: Sandbox escape in the XUL component.
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.
CVE-2026-100790: Use-after-free in the XSLT component.
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component.
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.
CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.
CVE-2026-100801: Privilege escalation in the DLL Services component.
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.
CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.
CVE-2026-100809: Same-origin policy bypass in the DevTools component.
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component.
CVE-2026-100812: Denial-of-service in the Graphics component.
CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.
CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.
CVE-2026-100816: Site isolation issue in the DOM: Networking component.
CVE-2026-100818: Sandbox escape due to use-after-free in…

Record: SUSE-SU-2026:4545-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4627-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929):

CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component.
CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component.
CVE-2026-92015: Privilege escalation in the WebExtensions component.
CVE-2026-92016: Use-after-free in the Disability Access APIs component.
CVE-2026-92017: Privilege escalation in the DOM: Service Workers component.
CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component.
CVE-2026-92019: Mitigation bypass in the Remote Settings Client component.
CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component.
CVE-2026-92022: Use-after-free in the DOM: HTML Parser component.
CVE-2026-92023: Use-after-free in the XML component.
CVE-2026-92024: Use-after-free in the SVG component.
CVE-2026-92025: Use-after-free in the DOM: Navigation component.
CVE-2026-92026: Use-after-free in the Networking component.
CVE-2026-92027: Use-after-free in the DOM: Streams component.
CVE-2026-92028: Use-after-free in the DOM: Core & HTML component.
CVE-2026-92029: Use-after-free in the SVG component.
CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component.
CVE-2026-92031: Information disclosure in the Graphics: ImageLib component.
CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component.
CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component.
CVE-2026-92038: Mitigation bypass in the Remote Settings Client component.
CVE-2026-92039: Mitigation bypass in the DOM: Notifications component.
CVE-2026-92041: Mitigation bypass in the DOM: Networking component.
CVE-2026-92042: Race condition in the DOM: Content Processes component.
CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component.
CVE-2026-92044: Information disclosure in the Networking: HTTP component.
CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component.
CVE-2026-92046: Use-after-free in the Graphics component.
CVE-2026-92047: Privilege escalation in the Crash Reporting component.
CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.
CVE-2026-92049: Use-after-free in the Widget: Win32 component.
CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component.
CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component.
CVE-2026-92054: Privilege escalation in the Memory component.
CVE-2026-92055: Privilege escalation in the DevTools component.
CVE-2026-92056: Use-after-free in the Graphics: Text component.
CVE-2026-92057: Mitigation bypass in the Enterprise Policies component.
CVE-2026-92058: Use-after-free in the Graphics component.
CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component.
CVE-2026-92060: Use-after-free in the…

Record: SUSE-SU-2026:4627-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` AlmaLinux:9 From an advisory covering 43 CVEs	before 140.17.0-1.el9_8.alma.1	140.17.0-1.el9_8.alma.1
`firefox-x11` AlmaLinux:9 From an advisory covering 43 CVEs	before 140.17.0-1.el9_8.alma.1	140.17.0-1.el9_8.alma.1
`firefox` AlmaLinux:10 From an advisory covering 43 CVEs	before 140.17.0-1.el10_2	140.17.0-1.el10_2
`firefox` AlmaLinux:8 From an advisory covering 43 CVEs	before 140.17.0-1.el8_10.alma.1	140.17.0-1.el8_10.alma.1
`thunderbird` AlmaLinux:10 From an advisory covering 42 CVEs	before 140.17.0-1.el10_2.alma.1	140.17.0-1.el10_2.alma.1
`thunderbird` AlmaLinux:9 From an advisory covering 42 CVEs	before 140.17.0-1.el9_8.alma.1	140.17.0-1.el9_8.alma.1
`thunderbird` AlmaLinux:8 From an advisory covering 43 CVEs	before 140.17.0-1.el8_10.alma.1	140.17.0-1.el8_10.alma.1
`thunderbird` TuxCare:AlmaLinux:9.2 From an advisory covering 125 CVEs	before 153.5.0-1.el9_2.alma.1.tuxcare.els1	153.5.0-1.el9_2.alma.1.tuxcare.els1
`firefox-esr` Debian:12	before 153.4.0esr-1~deb12u1, plus listed versions 102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1 Show 45 moreShow less 102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1	153.4.0esr-1~deb12u1
`firefox-esr` Debian:13	before 153.4.0esr-1~deb13u1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1	153.4.0esr-1~deb13u1

Show 52 moreShow less

Affected packages
Package	Affected	Fixed
`firefox-esr` Debian:14	before 153.4.0esr-1, plus listed versions 128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1 Show 45 moreShow less 140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1	153.4.0esr-1
`thunderbird` Debian:12	before 1:140.17.0esr-1~deb12u1, plus listed versions 1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1 Show 45 moreShow less 1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1	1:140.17.0esr-1~deb12u1
`thunderbird` Debian:13	before 1:140.17.0esr-1~deb13u1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.16.0esr-1~deb13u11:140.17.0esr-1~deb12u11:140.2.0esr-1	1:140.17.0esr-1~deb13u1
`thunderbird` Debian:14	before 1:153.4.0esr-1, plus listed versions 1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1 Show 45 moreShow less 1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.16.0esr-1~deb13u11:140.17.0esr-1~deb12u11:140.17.0esr-1~deb13u1	1:153.4.0esr-1
`nss` Mageia:10 From an advisory covering 62 CVEs	before 3.130.0-1.mga10	3.130.0-1.mga10
`firefox-l10n` Mageia:10 From an advisory covering 62 CVEs	before 153.4.0-1.mga10	153.4.0-1.mga10
`firefox` Mageia:10 From an advisory covering 62 CVEs	before 153.4.0-1.mga10	153.4.0-1.mga10
`thunderbird-l10n` Mageia:10 From an advisory covering 63 CVEs	before 153.4.0-1.mga10	153.4.0-1.mga10
`thunderbird` Mageia:10 From an advisory covering 63 CVEs	before 153.4.0-3.mga10	153.4.0-3.mga10
`firefox` openEuler:24.03-LTS-SP1 From an advisory covering 43 CVEs	before 140.17.0-1.oe2403sp1	140.17.0-1.oe2403sp1
`firefox` openEuler:24.03-LTS-SP3 From an advisory covering 43 CVEs	before 140.17.0-1.oe2403sp3	140.17.0-1.oe2403sp3
`firefox` openEuler:24.03-LTS-SP4 From an advisory covering 43 CVEs	before 140.17.0-1.oe2403sp4	140.17.0-1.oe2403sp4
`firefox` openEuler:22.03-LTS-SP4 From an advisory covering 43 CVEs	before 140.17.0-1.oe2203sp4	140.17.0-1.oe2203sp4
`thunderbird` openEuler:24.03-LTS-SP3 From an advisory covering 74 CVEs	before 140.16.0-1.oe2403sp3	140.16.0-1.oe2403sp3
`thunderbird` openEuler:24.03-LTS-SP4 From an advisory covering 74 CVEs	before 140.16.0-1.oe2403sp4	140.16.0-1.oe2403sp4
`firefox` Rocky Linux:9 From an advisory covering 43 CVEs	before 0:140.17.0-1.el9_8	0:140.17.0-1.el9_8
`firefox` Rocky Linux:10 From an advisory covering 43 CVEs	before 0:140.17.0-1.el10_2	0:140.17.0-1.el10_2
`firefox` Rocky Linux:8 From an advisory covering 43 CVEs	before 0:140.17.0-1.el8_10	0:140.17.0-1.el8_10
`thunderbird` Rocky Linux:10 From an advisory covering 42 CVEs	before 0:140.17.0-1.el10_2	0:140.17.0-1.el10_2
`thunderbird` Rocky Linux:9 From an advisory covering 42 CVEs	before 0:140.17.0-1.el9_8	0:140.17.0-1.el9_8
`thunderbird` Rocky Linux:8 From an advisory covering 43 CVEs	before 0:140.17.0-1.el8_10	0:140.17.0-1.el8_10
`MozillaFirefox` SUSE:Linux Enterprise Server 16.0 From an advisory covering 62 CVEs	before 153.4.0-160000.1.1	153.4.0-160000.1.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 62 CVEs	before 153.4.0-160000.1.1	153.4.0-160000.1.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 62 CVEs	before 153.4.0-118.11.1	153.4.0-118.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 62 CVEs	before 153.4.0-118.11.1	153.4.0-118.11.1
`MozillaFirefox` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 62 CVEs	before 153.4.0-150400.157.11.1	153.4.0-150400.157.11.1
`MozillaThunderbird` SUSE:Linux Enterprise Module for Package Hub 15 SP7 From an advisory covering 129 CVEs	before 153.4.0-150400.13.6.1	153.4.0-150400.13.6.1
`MozillaThunderbird` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 129 CVEs	before 153.4.0-150400.13.6.1	153.4.0-150400.13.6.1
`mozjs52` Ubuntu:18.04:LTS	All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1	None known
`mozjs38` Ubuntu:18.04:LTS	All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4	None known
`mozjs68` Ubuntu:20.04:LTS	All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1	None known
`mozjs52` Ubuntu:20.04:LTS	All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3	None known
`mozjs102` Ubuntu:22.04:LTS	All versions, plus listed versions 102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1	None known
`mozjs78` Ubuntu:22.04:LTS	All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1	None known
`mozjs91` Ubuntu:22.04:LTS	All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1	None known
`thunderbird` Ubuntu:22.04:LTS	All versions, plus listed versions 1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1 Show 34 moreShow less 1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1	None known
`mozjs102` Ubuntu:24.04:LTS	All versions, plus listed versions 102.15.1-1102.15.1-3ubuntu2	None known
`mozjs115` Ubuntu:24.04:LTS	All versions, plus listed versions 115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4 Show 4 moreShow less 115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1	None known
`firefox-esr` openSUSE:Tumbleweed From an advisory covering 62 CVEs	before 153.4.0-1.1	153.4.0-1.1
`MozillaFirefox` openSUSE:Tumbleweed From an advisory covering 77 CVEs	before 157.0.1-1.1	157.0.1-1.1
`MozillaThunderbird` openSUSE:Tumbleweed From an advisory covering 138 CVEs	before 153.4.0-1.1	153.4.0-1.1
`MozillaFirefox` openSUSE:Leap 16.0 From an advisory covering 62 CVEs	before 153.4.0-160000.1.1	153.4.0-160000.1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-100772 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published September 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in firefox-esr 153.4.0esr-1~deb12u1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 491 versions, 256 references and the rest of 26 source descriptions. The JSON record has them.