{"id":"CVE-2016-9905","aliases":["DEBIAN-CVE-2016-9905","DLA-743-1","DLA-782-1","DSA-3734-1","DSA-3757-1","EUVD-2016-10694","GHSA-2f28-6595-fhpf","MGASA-2016-0420","MGASA-2017-0006","RHSA-2016:2946","RHSA-2016:2973","SUSE-SU-2016:3210-1","SUSE-SU-2016:3222-1","SUSE-SU-2016:3223-1","UBUNTU-CVE-2016-9905","USN-3165-1","openSUSE-SU-2016:3307-1","openSUSE-SU-2016:3308-1","openSUSE-SU-2024:10601-1"],"status":"published","title":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents...","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02322,"percentile":0.83578,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-12-14T00:00:00Z","modified":"2026-09-22T07:02:30Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["45.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["45.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["45.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:45.7.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:45.7.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-1~deb7u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:7","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.6.0-2~deb7u1"}]}],"versions":["10.0.12-1","11.0-1","16.0.2-1","17.0-1","17.0.10-1","17.0.10-1+powerpcspe1","17.0.10-1+powerpcspe2","17.0.10-1~deb7u1","17.0.2-1","17.0.4-1","17.0.5-1","17.0.5-2","17.0.7-1","17.0.7-1~deb7u1","17.0.8-1","17.0.8-1~deb7u1","17.0.9-1","17.0.9-1~deb7u1","17.0.9-2","1:45.0~b4-1","1:45.0~b4-2","1:45.1.0-1","1:45.1.0-1~deb7u1","1:45.1.0-1~deb8u1","1:45.2.0-1","1:45.2.0-1~deb8u1","1:45.2.0-2","1:45.2.0-2~deb7u1","1:45.2.0-3","1:45.2.0-4","1:45.2~b1-1","1:45.3.0-1","1:45.3.0-1~deb7u1","1:45.3.0-1~deb8u1","1:45.4.0-1","1:45.4.0-1~deb7u1","1:45.4.0-1~deb8u1","1:45.5.0-1","1:45.5.1-1","1:45.5.1-1~deb7u1","1:45.5.1-1~deb8u1","1:45.6.0-1","1:45.6.0-1~deb8u1","24.0-1","24.0~b3-2","24.1.1-1","24.2.0-1","24.2.0-1+alpha","24.2.0-1+powerpcspe1","24.3.0-1","24.3.0-2","24.4.0-1","24.4.0-1~deb7u1","24.5.0-1","24.5.0-1~deb7u1","24.5.0-2","24.6.0-1~deb7u1","24.7.0-1~deb7u1","24.8.0-1~deb7u1","24.8.1-1~deb7u1","30.0~b1-1","31.0-1","31.0-2","31.0-3","31.0~b1-2","31.0~b2-1","31.1.2-1","31.2.0-1","31.2.0-1~deb7u1","31.3.0-1","31.3.0-1+powerpcspe1","31.3.0-1~deb7u1","31.4.0-1","31.4.0-1~deb7u1","31.4.0-2","31.5.0-1","31.5.0-1~deb7u1","31.6.0-1","31.6.0-1~deb7u1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1","38.8.0-1~deb7u1","38.8.0-1~deb7u1.1","38.8.0-1~deb8u1","40.0~b1-1","41.0~b2-1","42.0~b1-1","42.0~b2-1","43.0~b1-1","44.0~b1-1"],"bundled":8},{"source":"osv","ecosystem":"Debian:8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-1~deb8u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1~deb7u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:8","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.6.0-1~deb8u1"}]}],"versions":["1:45.0~b4-1","1:45.0~b4-2","1:45.1.0-1","1:45.1.0-1~deb7u1","1:45.1.0-1~deb8u1","1:45.2.0-1","1:45.2.0-1~deb8u1","1:45.2.0-2","1:45.2.0-2~deb7u1","1:45.2.0-3","1:45.2.0-4","1:45.2~b1-1","1:45.3.0-1","1:45.3.0-1~deb7u1","1:45.3.0-1~deb8u1","1:45.4.0-1","1:45.4.0-1~deb7u1","1:45.4.0-1~deb8u1","1:45.5.0-1","1:45.5.1-1","1:45.5.1-1~deb7u1","1:45.5.1-1~deb8u1","31.6.0-1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1","38.8.0-1~deb7u1","38.8.0-1~deb7u1.1","38.8.0-1~deb8u1","40.0~b1-1","41.0~b2-1","42.0~b1-1","42.0~b2-1","43.0~b1-1","44.0~b1-1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-1.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-1.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el5_11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.6.0-1.el7_3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-62.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-96.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0esr-66.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.7.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.7.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.7.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1"],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:45.7.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1"],"bundled":16},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-20.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.6.0-20.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.1.1-1.1"}]}],"bundled":394}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2016-95/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/94884","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-15","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3757","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1293985","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2973.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1037462","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-96/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2946.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9905","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-95"},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-96"},{"url":"https://github.com/advisories/GHSA-2f28-6595-fhpf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9905","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0420.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19945","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-2946.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0006.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20003","tags":["report"]},{"url":"https://www.mozilla.org/en-US/thunderbird/45.6.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-96/","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-2973.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2946","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404359","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2946.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9893","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9893","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9895","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9895","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9897","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9897","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9898","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9898","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9899","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/#CVE-2016-9899","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9900","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9900","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9901","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9901","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9902","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9902","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9904","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9904","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9905","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9905","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-95/#CVE-2016-9905","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2973","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2973.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163210-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000751","tags":["report"]},{"url":"https://bugzilla.suse.com/1015422","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9905","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163222-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163223-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9905","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/#CVE-2016-9905","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3165-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5396","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38495","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-9905","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-06T03:07:31.496Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-10694","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-06T03:07:31Z","updated_at":"2026-11-03T02:22:25.833438Z"}],"ghsa":[{"id":"GHSA-2f28-6595-fhpf","title":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents...","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2022-05-14T03:09:02Z","modified":"2025-11-25T18:33:16Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:04:56.973775Z"}],"nvd":[{"id":"CVE-2016-9905","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2018-06-11T21:29:02.53Z","modified":"2026-06-17T00:56:45.627Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"CVE-2016-9905","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2018-06-11T21:29:02.53Z","modified":"2026-04-16T06:15:11.597511934Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9905","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2018-06-11T21:29:02.53Z","modified":"2026-09-22T07:02:30.700287968Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"RHSA-2016:2946","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T23:54:05Z","modified":"2026-06-26T10:32:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2973","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T23:54:10Z","modified":"2026-06-26T10:32:31Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-9905","description":"A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.","status":"published","published":"2016-12-14T00:00:00Z","modified":"2026-04-22T11:06:55.998534Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-743-1","title":"firefox-esr - security update","status":"published","published":"2016-12-15T00:00:00Z","modified":"2026-03-09T01:01:41.398036Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DLA-782-1","title":"icedove - security update","status":"published","published":"2017-01-13T00:00:00Z","modified":"2026-03-09T02:10:05.567724Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3734-1","title":"firefox-esr - security update","status":"published","published":"2016-12-14T00:00:00Z","modified":"2026-03-09T01:23:13.879602Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3757-1","title":"icedove - security update","status":"published","published":"2017-01-11T00:00:00Z","modified":"2026-03-09T01:20:18.610618Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0420","title":"Updated firefox packages fix security vulnerabilities","description":"Multiple flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or, potentially,\nexecute arbitrary code with the privileges of the user running Firefox\n(CVE-2016-9893, CVE-2016-9899, CVE-2016-9895, CVE-2016-9897, CVE-2016-9898,\nCVE-2016-9900, CVE-2016-9901, CVE-2016-9902, CVE-2016-9904, CVE-2016-9905).\n","status":"published","published":"2016-12-15T20:33:35Z","modified":"2026-04-16T06:23:44.553119134Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0006","title":"Updated thunderbird packages fix security vulnerabilities","description":"Use-after-free while manipulating DOM events and removing audio elements\ndue to errors in the handling of node adoption (CVE-2016-9899).\n\nEvent handlers on marquee elements were executed despite a strict\nContent Security Policy (CSP) that disallowed inline JavaScript\n(CVE-2016-9895).\n\nMemory corruption resulting in a potentially exploitable crash during\nWebGL functions using a vector constructor with a varying array within\nlibGLES (CVE-2016-9897).\n\nUse-after-free resulting in potentially exploitable crash when\nmanipulating DOM subtrees in the Editor (CVE-2016-9898).\n\nExternal resources that should be blocked when loaded by SVG images can\nbypass security restrictions through the use of data: URLs. This could\nallow for cross-domain data leakage (CVE-2016-9900).\n\nAn attacker could use a JavaScript Map/Set timing attack to determine\nwhether an atom is used by another compartment/zone in specific\ncontexts. This could be used to leak information, such as usernames\nembedded in JavaScript code, across websites (CVE-2016-9904).\n\nA potentially exploitable crash in EnumerateSubDocuments while adding or\nremoving sub-documents (CVE-2016-9905).\n\nMozilla developers and community members Jan de Mooij, Iris Hsiao,\nChristian Holler, Carsten Book, Timothy Nikkel, Christoph Diehl, Olli\nPettay, Raymond Forbes, and Boris Zbarsky reported memory safety bugs\npresent in Thunderbird ESR 45.6. Some of these bugs showed evidence\nof memory corruption and we presume that with enough effort that some of\nthese could be exploited to run arbitrary code (CVE-2016-9893).\n","status":"published","published":"2017-01-06T08:28:18Z","modified":"2026-04-16T06:26:20.433976762Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2016:3307-1","title":"Security update for MozillaThunderbird","description":"This update to Mozilla Thunderbird 45.6.0 fixes security issues and bugs.\n\nIn general, these flaws cannot be exploited through email in Thunderbird because\nscripting is disabled when reading mail, but are potentially risks in browser or\nbrowser-like contexts.\n\nThe following vulnerabilities were fixed: (boo#1015422)\n\n- CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements\n- CVE-2016-9895: CSP bypass using marquee tag\n- CVE-2016-9897: Memory corruption in libGLES\n- CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees\n- CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs\n- CVE-2016-9904: Cross-origin information leak in shared atoms\n- CVE-2016-9905: Crash in EnumerateSubDocuments\n- CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6\n\nThe following bugs were fixed:\n\n- The system integration dialog was shown every time when starting Thunderbird\n","status":"published","published":"2016-12-30T17:01:32Z","modified":"2026-02-04T02:34:46.021142Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2016:3308-1","title":"Security update for MozillaThunderbird","description":"This update to Mozilla Thunderbird 45.6.0 fixes security issues and bugs.\n\nIn general, these flaws cannot be exploited through email in Thunderbird because\nscripting is disabled when reading mail, but are potentially risks in browser or\nbrowser-like contexts.\n\nThe following vulnerabilities were fixed: (boo#1015422)\n\n- CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements\n- CVE-2016-9895: CSP bypass using marquee tag\n- CVE-2016-9897: Memory corruption in libGLES\n- CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees\n- CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs\n- CVE-2016-9904: Cross-origin information leak in shared atoms\n- CVE-2016-9905: Crash in EnumerateSubDocuments\n- CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6\n\nThe following bugs were fixed:\n\n- The system integration dialog was shown every time when starting Thunderbird\n","status":"published","published":"2016-12-30T17:01:32Z","modified":"2026-02-04T03:16:26.111503Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10601-1","title":"MozillaThunderbird-91.1.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:23.188336Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:3210-1","title":"Security update for MozillaFirefox","description":"\nMozillaFirefox 45 ESR was updated to 45.6 to fix the following issues:\n\n* MFSA 2016-95/CVE-2016-9897: Memory corruption in libGLES\n* MFSA 2016-95/CVE-2016-9901: Data from Pocket server improperly sanitized before execution\n* MFSA 2016-95/CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees\n* MFSA 2016-95/CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements\n* MFSA 2016-95/CVE-2016-9904: Cross-origin information leak in shared atoms\n* MFSA 2016-95/CVE-2016-9905: Crash in EnumerateSubDocuments\n* MFSA 2016-95/CVE-2016-9895: CSP bypass using marquee tag\n* MFSA 2016-95/CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs\n* MFSA 2016-95/CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6\n* MFSA 2016-95/CVE-2016-9902: Pocket extension does not validate the origin of events\n\nPlease see https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/\nfor more information.\n\nAlso the following bug was fixed:\n- Fix fontconfig issue (bsc#1000751) on 32bit systems as well.\n","status":"published","published":"2016-12-21T15:25:59Z","modified":"2026-02-04T03:56:26.3912Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3222-1","title":"Security update for MozillaFirefox","description":"\nMozillaFirefox 45 ESR was updated to 45.6 to fix the following issues:\n\n* MFSA 2016-95/CVE-2016-9897: Memory corruption in libGLES\n* MFSA 2016-95/CVE-2016-9901: Data from Pocket server improperly sanitized before execution\n* MFSA 2016-95/CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees\n* MFSA 2016-95/CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements\n* MFSA 2016-95/CVE-2016-9904: Cross-origin information leak in shared atoms\n* MFSA 2016-95/CVE-2016-9905: Crash in EnumerateSubDocuments\n* MFSA 2016-95/CVE-2016-9895: CSP bypass using marquee tag\n* MFSA 2016-95/CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs\n* MFSA 2016-95/CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6\n* MFSA 2016-95/CVE-2016-9902: Pocket extension does not validate the origin of events\n\nPlease see https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/\nfor more information.\n\n","status":"published","published":"2016-12-21T21:36:09Z","modified":"2026-02-04T03:18:27.965509Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3223-1","title":"Security update for MozillaFirefox","description":"\nMozillaFirefox 45 ESR was updated to 45.6 to fix the following issues:\n\n* MFSA 2016-95/CVE-2016-9897: Memory corruption in libGLES\n* MFSA 2016-95/CVE-2016-9901: Data from Pocket server improperly sanitized before execution\n* MFSA 2016-95/CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees\n* MFSA 2016-95/CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements\n* MFSA 2016-95/CVE-2016-9904: Cross-origin information leak in shared atoms\n* MFSA 2016-95/CVE-2016-9905: Crash in EnumerateSubDocuments\n* MFSA 2016-95/CVE-2016-9895: CSP bypass using marquee tag\n* MFSA 2016-95/CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs\n* MFSA 2016-95/CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6\n* MFSA 2016-95/CVE-2016-9902: Pocket extension does not validate the origin of events\n\nPlease see https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/\nfor more information.\n\n- Fix fontconfig issue (bsc#1000751) on 32bit systems as well.\n","status":"published","published":"2016-12-21T21:36:44Z","modified":"2025-05-02T04:05:44.868555Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3165-1","title":"thunderbird vulnerabilities","description":"Multiple memory safety issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted message, an attacker could\npotentially exploit these to cause a denial of service via application\ncrash, or execute arbitrary code. (CVE-2016-9893, CVE-2017-5373)\n\nAndrew Krasichkov discovered that event handlers on \u003cmarquee\u003e elements\nwere executed despite a Content Security Policy (CSP) that disallowed\ninline JavaScript. If a user were tricked in to opening a specially\ncrafted website in a browsing context, an attacker could potentially\nexploit this to conduct cross-site scripting (XSS) attacks.\n(CVE-2016-9895)\n\nA memory corruption issue was discovered in WebGL in some circumstances.\nIf a user were tricked in to opening a specially crafted website in a\nbrowsing context, an attacker could potentially exploit this to cause a\ndenial of service via application crash, or execute arbitrary code.\n(CVE-2016-9897)\n\nA use-after-free was discovered when manipulating DOM subtrees in the\nEditor. If a user were tricked in to opening a specially crafted website\nin a browsing context, an attacker could potentially exploit this to\ncause a denial of service via application crash, or execute arbitrary\ncode. (CVE-2016-9898)\n\nA use-after-free was discovered when manipulating DOM events and audio\nelements. If a user were tricked in to opening a specially crafted website\nin a browsing context, an attacker could potentially exploit this to\ncause a denial of service via application crash, or execute arbitrary\ncode. (CVE-2016-9899)\n\nIt was discovered that external resources that should be blocked when\nloading SVG images can bypass security restrictions using data: URLs. An\nattacker could potentially exploit this to obtain sensitive information.\n(CVE-2016-9900)\n\nJann Horn discovered that JavaScript Map/Set were vulnerable to timing\nattacks. If a user were tricked in to opening a specially crafted website\nin a browsing context, an attacker could potentially exploit this to\nobtain sensitive information across domains. (CVE-2016-9904)\n\nA crash was discovered in EnumerateSubDocuments while adding or removing\nsub-documents. If a user were tricked in to opening a specially crafted\nwebsite in a browsing context, an attacker could potentially exploit this\nto execute arbitrary code. (CVE-2016-9905)\n\nJIT code allocation can allow a bypass of ASLR protections in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite in a browsing context, an attacker could potentially exploit this\nto cause a denial of service via application crash, or execute arbitrary\ncode. (CVE-2017-5375)\n\nNicolas Grégoire discovered a use-after-free when manipulating XSL in\nXSLT documents in some circumstances. If a user were tricked in to opening\na specially crafted website in a browsing context, an attacker could\npotentially exploit this to cause a denial of service via application\ncrash, or execute arbitrary code. (CVE-2017-5376)\n\nJann Horn discovered that an object's address could be discovered through\nhashed codes of JavaScript objects shared between pages. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit this to obtain sensitive\ninformation. (CVE-2017-5378)\n\nA use-after-free was discovered during DOM manipulation of SVG content in\nsome circumstances. If a user were tricked in to opening a specially\ncrafted website in a browsing context, an attacker could potentially\nexploit this to cause a denial of service via application crash, or\nexecute arbitrary code. (CVE-2017-5380)\n\nArmin Razmjou discovered that certain unicode glyphs do not trigger\npunycode display. If a user were tricked in to opening a specially crafted\nwebsite in a browsing context, an attacker could potentially exploit this\nto spoof the URL bar contents. (CVE-2017-5383)\n\nJerri Rice discovered insecure communication methods in the Dev Tools JSON\nViewer. An attacker could potentially exploit this to gain additional\nprivileges. (CVE-2017-5390)\n\nFilipe Gomes discovered a use-after-free in the media decoder in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite in a browsing context, an attacker could potentially exploit this\nto cause a denial of service via application crash, or execute arbitrary\ncode. (CVE-2017-5396)\n","status":"published","published":"2017-01-28T00:09:39Z","modified":"2026-04-22T09:30:57.854892Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}