{"id":"CVE-2018-5096","aliases":["ALPINE-CVE-2018-5096","DEBIAN-CVE-2018-5096","DLA-1256-1","DLA-1262-1","DSA-4096-1","DSA-4102-1","EUVD-2018-16882","GHSA-22wm-h2wq-6vm3","MGASA-2018-0097","MGASA-2018-0099","MGASA-2018-0115","MGASA-2018-0338","RHSA-2018:0122","RHSA-2018:0262","SUSE-SU-2018:0361-1","SUSE-SU-2018:0374-1","UBUNTU-CVE-2018-5096","USN-3529-1","openSUSE-SU-2018:0256-1","openSUSE-SU-2018:0257-1","openSUSE-SU-2024:10601-1"],"status":"published","title":"A use-after-free vulnerability can occur while editing events in form elements on a page,...","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02853,"percentile":0.86817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2018-01-25T00:00:00Z","modified":"2026-11-03T06:31:23Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"firefox-esr","fixed_in":["52.6.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["52.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["52.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["52.6.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:52.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:52.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:52.6.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.6.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.6.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1~deb7u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1"],"bundled":11},{"source":"osv","ecosystem":"Debian:7","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1~deb7u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1~deb8u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1~deb7u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:9","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-1~deb9u1"}]}],"versions":["45.9.0esr-1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1~deb8u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1~deb7u1"],"bundled":10},{"source":"osv","ecosystem":"Debian:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0-1~deb9u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1"],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18-1.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:6","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180104.00-1.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:6","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.6-1.3.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:6","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:6","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga6"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18-1.mga5"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180104.00-1.mga5"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.6-1.3.mga5"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga5"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga5"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga6"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0-1.mga6"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49.3-1.mga6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.6.0-1.el7_4"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-72.20.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6.0esr-109.13.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.6.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1"],"bundled":14},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6-54.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.6-54.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.1.1-1.1"}]}],"bundled":394}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2018-03/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00036.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4096","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0262","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/102771","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-04/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0122","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4102","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1418922","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Permissions Required","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5096","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-03"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-04"},{"url":"https://github.com/advisories/GHSA-22wm-h2wq-6vm3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-5096","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5096","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0097.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22432","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/","tags":["advisory","article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/","tags":["advisory","article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0099.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22434","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0115.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22470","tags":["report"]},{"url":"https://www.mozilla.org/en-US/thunderbird/52.6.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-04/","tags":["advisory","article"]},{"url":"https://advisories.mageia.org/MGASA-2018-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23100","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-10/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537825","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0122.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5089","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5089","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5091","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5091","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5095","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5095","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5096","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5096","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5097","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5097","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5098","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5098","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5099","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5099","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5102","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5102","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5103","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5103","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5103","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5104","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5104","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5104","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5117","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5117","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0262.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180361-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1077291","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180374-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-5096","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3529-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5117","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BDMR3YENC7V5BUBRGJXWANWHWNBW46OF/#BDMR3YENC7V5BUBRGJXWANWHWNBW46OF","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQKYFID4LB22UT3U2EOJ242RTGFRORJJ/#IQKYFID4LB22UT3U2EOJ242RTGFRORJJ","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38495","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46.688Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-16882","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46Z","updated_at":"2026-11-03T02:40:11.729267Z"}],"ghsa":[{"id":"GHSA-22wm-h2wq-6vm3","title":"A use-after-free vulnerability can occur while editing events in form elements on a page,...","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2022-05-14T03:09:40Z","modified":"2025-11-25T18:33:18Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:56.973775Z"}],"nvd":[{"id":"CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:29:12.513Z","modified":"2026-06-17T01:59:36.653Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"ALPINE-CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:29:12.513Z","modified":"2026-11-03T06:31:23.510668392Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:29:12.513Z","modified":"2026-04-16T06:18:28.482441846Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-06-11T21:29:12.513Z","modified":"2026-10-23T18:04:48.125372696Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"RHSA-2018:0122","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:56:31Z","modified":"2026-06-27T10:05:19Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0262","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T00:56:38Z","modified":"2026-06-27T10:05:20Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-5096","description":"A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.","status":"published","published":"2018-01-29T00:00:00Z","modified":"2026-04-22T11:56:00.861476Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DLA-1256-1","title":"firefox-esr - security update","status":"published","published":"2018-01-25T00:00:00Z","modified":"2026-03-09T01:01:44.444304Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1262-1","title":"thunderbird - security update","status":"published","published":"2018-01-29T00:00:00Z","modified":"2026-03-09T01:00:43.193319Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4096-1","title":"firefox-esr - security update","status":"published","published":"2018-01-25T00:00:00Z","modified":"2026-03-09T01:20:16.818532Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-4102-1","title":"thunderbird - security update","status":"published","published":"2018-01-30T00:00:00Z","modified":"2026-03-09T01:18:36.756864Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2018-0097","title":"Updated firefox packages fix security vulnerabilities","description":"Multiple flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095,\nCVE-2018-5096, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099,\nCVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5117).\n\nTo mitigate timing-based side-channel attacks similar to \"Spectre\" and\n\"Meltdown\", the resolution of performance.now() has been reduced from\n5μs to 20μs.\n","status":"published","published":"2018-01-25T12:47:25Z","modified":"2026-04-16T06:25:20.897988423Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0099","title":"Updated firefox packages fix security vulnerabilities","description":"Multiple flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095,\nCVE-2018-5096, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099,\nCVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5117).\n\nTo mitigate timing-based side-channel attacks similar to \"Spectre\" and\n\"Meltdown\", the resolution of performance.now() has been reduced from\n5μs to 20μs.\n","status":"published","published":"2018-01-25T13:36:49Z","modified":"2026-04-16T06:26:05.188065198Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0115","title":"Updated thunderbird packages fix security vulnerability","description":"Integer overflow in Skia library during edge builder allocation.\n(CVE-2018-5095)\n\nUse-after-free while editing form elements. (CVE-2018-5096)\n\nUse-after-free when source document is manipulated during XSLT.\n(CVE-2018-5097)\n\nUse-after-free while manipulating form input elements. (CVE-2018-5098)\n\nUse-after-free with widget listener. (CVE-2018-5099)\n\nUse-after-free in HTML media elements. (CVE-2018-5102)\n\nUse-after-free during mouse event handling. (CVE-2018-5103)\n\nUse-after-free during font face manipulation. (CVE-2018-5104)\n\nURL spoofing with right-to-left text aligned left-to-right.\n(CVE-2018-5117)\n\nMemory safety bugs fixed in Firefox 58, Firefox ESR 52.6, and Thunderbird\n52.6. (CVE-2018-5089)\n","status":"published","published":"2018-02-06T06:25:44Z","modified":"2026-04-16T06:24:02.315207902Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0338","title":"Updated iceaepe packages fix security vulnerability","description":"Updated iceape packages include security fixes from upstream Seamonkey\nand Firefox:\n\nMultiple flaws were found in the way Iceape 2.49.1 processes various types\nof web content, where loading a web page containing malicious content could\ncause Iceape to crash, execute arbitrary code, or disclose sensitive\ninformation (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096,\nCVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103,\nCVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,\nCVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148,\nCVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158,\nCVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)\n","status":"published","published":"2018-08-15T15:45:26Z","modified":"2026-04-16T06:23:51.688419512Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2018:0256-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird  to version 52.6 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5095: Integer overflow in Skia library during edge builder\n  allocation (bsc#1077291).\n- CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291).\n- CVE-2018-5097: Use-after-free when source document is manipulated during XSLT\n  (bsc#1077291).\n- CVE-2018-5098: Use-after-free while manipulating form input elements\n  (bsc#1077291).\n- CVE-2018-5099: Use-after-free with widget listener (bsc#1077291).\n- CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291).\n- CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291).\n- CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291).\n- CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right\n  (bsc#1077291).\n- CVE-2018-5089: Various memory safety bugs (bsc#1077291).\n\nThese security issues were fixed:\n\n- Searching message bodies of messages in local folders, including\n  filter and quick filter operations, not working reliably: Content\n  not found in base64-encode message parts, non-ASCII text not found\n  and false positives found.\n- Defective messages (without at least one expected header) not shown\n  in IMAP folders but shown on mobile devices\n- Calendar: Unintended task deletion if numlock is enabled\n  ","status":"published","published":"2018-01-27T21:50:06Z","modified":"2026-02-04T04:38:06.518965Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:0257-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird  to version 52.6 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5095: Integer overflow in Skia library during edge builder\n  allocation (bsc#1077291).\n- CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291).\n- CVE-2018-5097: Use-after-free when source document is manipulated during XSLT\n  (bsc#1077291).\n- CVE-2018-5098: Use-after-free while manipulating form input elements\n  (bsc#1077291).\n- CVE-2018-5099: Use-after-free with widget listener (bsc#1077291).\n- CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291).\n- CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291).\n- CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291).\n- CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right\n  (bsc#1077291).\n- CVE-2018-5089: Various memory safety bugs (bsc#1077291).\n\nThese security issues were fixed:\n\n- Searching message bodies of messages in local folders, including\n  filter and quick filter operations, not working reliably: Content\n  not found in base64-encode message parts, non-ASCII text not found\n  and false positives found.\n- Defective messages (without at least one expected header) not shown\n  in IMAP folders but shown on mobile devices\n- Calendar: Unintended task deletion if numlock is enabled\n  ","status":"published","published":"2018-01-27T21:50:06Z","modified":"2025-05-02T04:29:58.494551Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10601-1","title":"MozillaThunderbird-91.1.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:23.188336Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0361-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version ESR 52.6 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5091: Use-after-free with DTMF timers (bsc#1077291).\n- CVE-2018-5095: Integer overflow in Skia library during edge builder allocation (bsc#1077291).\n- CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291).\n- CVE-2018-5097: Use-after-free when source document is manipulated during XSLT (bsc#1077291).\n- CVE-2018-5098: Use-after-free while manipulating form input elements (bsc#1077291).\n- CVE-2018-5099: Use-after-free with widget listener (bsc#1077291).\n- CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291).\n- CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291).\n- CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291).\n- CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right (bsc#1077291).\n- CVE-2018-5089: Various memory safety bugs (bsc#1077291).\n","status":"published","published":"2018-02-05T07:35:06Z","modified":"2026-02-04T02:31:20.208207Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0374-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version 52.6 several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5091: Use-after-free with DTMF timers (bsc#1077291).\n- CVE-2018-5095: Integer overflow in Skia library during edge builder allocation (bsc#1077291).\n- CVE-2018-5096: Use-after-free while editing form elements (bsc#1077291).\n- CVE-2018-5097: Use-after-free when source document is manipulated during XSLT (bsc#1077291).\n- CVE-2018-5098: Use-after-free while manipulating form input elements (bsc#1077291).\n- CVE-2018-5099: Use-after-free with widget listener (bsc#1077291).\n- CVE-2018-5104: Use-after-free during font face manipulation (bsc#1077291).\n- CVE-2018-5089: Fixed several memory safety bugs (bsc#1077291).\n- CVE-2018-5117: URL spoofing with right-to-left text aligned left-to-right (bsc#1077291).\n- CVE-2018-5102: Use-after-free in HTML media elements (bsc#1077291).\n- CVE-2018-5103: Use-after-free during mouse event handling (bsc#1077291).\n","status":"published","published":"2018-02-06T10:47:56Z","modified":"2026-02-04T04:39:06.410175Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3529-1","title":"thunderbird vulnerabilities","description":"It was discovered that a From address encoded with a null character is\ncut off in the message header display. An attacker could potentially\nexploit this to spoof the sender address. (CVE-2017-7829)\n\nIt was discovered that it is possible to execute JavaScript in RSS feeds\nin some circumstances. If a user were tricked in to opening a specially\ncrafted RSS feed, an attacker could potentially exploit this in\ncombination with another vulnerability, in order to cause unspecified\nproblems. (CVE-2017-7846)\n\nIt was discovered that the RSS feed can leak local path names. If a user\nwere tricked in to opening a specially crafted RSS feed, an attacker\ncould potentially exploit this to obtain sensitive information.\n(CVE-2017-7847)\n\nIt was discovered that RSS feeds are vulnerable to new line injection. If\na user were tricked in to opening a specially crafted RSS feed, an\nattacker could potentially exploit this to cause unspecified problems.\n(CVE-2017-7848)\n\nMultiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nexecute arbitrary code, or cause other unspecified effects.\n(CVE-2018-5089, CVE-2018-5095, CVE-2018-5096, CVE-2018-5097,\nCVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104,\nCVE-2018-5117)\n","status":"published","published":"2018-01-29T22:37:27Z","modified":"2026-04-22T09:42:44.067018Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}