{"id":"CVE-2023-25746","aliases":["ALPINE-CVE-2023-25746","ALSA-2023:0808","ALSA-2023:0810","ALSA-2023:0821","ALSA-2023:0824","DEBIAN-CVE-2023-25746","DLA-3319-1","DLA-3324-1","DSA-5350-1","DSA-5355-1","EUVD-2023-29653","GHSA-63m6-9qhj-8rqf","MGASA-2023-0056","MGASA-2023-0057","RHSA-2023:0805","RHSA-2023:0806","RHSA-2023:0807","RHSA-2023:0808","RHSA-2023:0809","RHSA-2023:0810","RHSA-2023:0811","RHSA-2023:0812","RHSA-2023:0817","RHSA-2023:0818","RHSA-2023:0819","RHSA-2023:0820","RHSA-2023:0821","RHSA-2023:0822","RHSA-2023:0823","RHSA-2023:0824","RLSA-2023:0808","RLSA-2023:0810","RLSA-2023:0821","RLSA-2023:0824","SUSE-SU-2023:0461-1","SUSE-SU-2023:0466-1","SUSE-SU-2023:0469-1","SUSE-SU-2023:0599-1","UBUNTU-CVE-2023-25746","USN-5943-1","openSUSE-SU-2024:12702-1","openSUSE-SU-2024:12713-1"],"status":"published","title":"Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00668,"percentile":0.52404,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-02-15T00:00:00Z","modified":"2026-11-03T06:32:58Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"firefox-esr","fixed_in":["102.8.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["102.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["102.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["102.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:102.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:102.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:102.8.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","fixed_in":["1:102.8.0+build2-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","fixed_in":["1:102.8.0+build2-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","fixed_in":["1:102.8.0+build2-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-2.el8_7.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-2.el9_1.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-2.el9_1.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-2.el8_7.alma"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-2.el9_1.alma"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0esr-1~deb10u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","60.7.2esr-1","60.8.0esr-1","60.8.0esr-1~deb10u1","60.8.0esr-1~deb8u1","60.8.0esr-1~deb9u1","60.9.0esr-1~deb10u1","60.9.0esr-1~deb8u1","60.9.0esr-1~deb8u2","60.9.0esr-1~deb9u1","68.0.2esr-1","68.1.0esr-1","68.10.0esr-1","68.10.0esr-1~deb10u1","68.10.0esr-1~deb9u1","68.11.0esr-1","68.11.0esr-1~deb10u1","68.11.0esr-1~deb9u1","68.12.0esr-1","68.12.0esr-1~deb10u1","68.12.0esr-1~deb9u1","68.2.0esr-1","68.2.0esr-1~deb10u1","68.2.0esr-1~deb8u1","68.2.0esr-1~deb9u1","68.2.0esr-1~deb9u2","68.3.0esr-1","68.3.0esr-1~deb10u1","68.3.0esr-1~deb8u1","68.3.0esr-1~deb9u1","68.4.0esr-1","68.4.0esr-1~deb10u1","68.4.0esr-1~deb8u1","68.4.0esr-1~deb9u1","68.4.1esr-1","68.4.1esr-1~deb10u1","68.4.1esr-1~deb8u1","68.4.1esr-1~deb9u1","68.4.2esr-1","68.5.0esr-1","68.5.0esr-1~deb10u1","68.5.0esr-1~deb8u1","68.5.0esr-1~deb9u1","68.6.0esr-1","68.6.0esr-1~deb10u1","68.6.0esr-1~deb8u1","68.6.0esr-1~deb9u1","68.6.1esr-1","68.6.1esr-1~deb10u1","68.6.1esr-1~deb9u1","68.7.0esr-1","68.7.0esr-1~deb10u1","68.7.0esr-1~deb8u1","68.7.0esr-1~deb9u1","68.8.0esr-1","68.8.0esr-1~deb10u1","68.8.0esr-1~deb8u1","68.8.0esr-1~deb9u1","68.9.0esr-1","68.9.0esr-1~deb10u1","68.9.0esr-1~deb8u1","68.9.0esr-1~deb8u2","68.9.0esr-1~deb9u1","78.10.0esr-1","78.10.0esr-1~deb10u1","78.10.0esr-1~deb9u1","78.11.0esr-1","78.11.0esr-1~deb10u1","78.11.0esr-1~deb9u1","78.12.0esr-1","78.12.0esr-1~deb10u1","78.12.0esr-1~deb9u1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","78.2.0esr-1","78.3.0esr-1","78.3.0esr-1~deb10u1","78.3.0esr-1~deb9u1","78.3.0esr-1~deb9u2","78.3.0esr-2","78.4.0esr-1","78.4.0esr-1~deb10u1","78.4.0esr-1~deb10u2","78.4.0esr-1~deb9u1","78.4.0esr-2","78.4.1esr-1","78.4.1esr-1~deb10u1","78.4.1esr-1~deb9u1","78.4.1esr-2","78.5.0esr-1","78.5.0esr-1~deb10u1","78.5.0esr-1~deb9u1","78.6.0esr-1","78.6.0esr-1~deb10u1","78.6.0esr-1~deb9u1","78.6.1esr-1","78.6.1esr-1~deb10u1","78.6.1esr-1~deb9u1","78.7.0esr-1","78.7.0esr-1~deb10u1","78.7.0esr-1~deb9u1","78.8.0esr-1","78.8.0esr-1~deb10u1","78.8.0esr-1~deb9u1","78.9.0esr-1","78.9.0esr-1~deb10u1","78.9.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0-1~deb10u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:60.7.2-1","1:60.8.0-1","1:60.8.0-1~deb10u1","1:60.8.0-1~deb8u1","1:60.8.0-1~deb9u1","1:60.8.0-2","1:60.9.0-1","1:60.9.0-1~deb10u1","1:60.9.0-1~deb8u1","1:60.9.0-1~deb9u1","1:65.0~b1-1","1:66.0~b1-1","1:67.0~b3-1","1:68.0~b1-1","1:68.1.1-1~exp1","1:68.1.2-1~exp1","1:68.10.0-1","1:68.10.0-1~deb10u1","1:68.10.0-1~deb9u1","1:68.11.0-1","1:68.11.0-1~deb10u1","1:68.11.0-1~deb9u1","1:68.11.0-2","1:68.11.0-3","1:68.12.0-1","1:68.12.0-1~deb10u1","1:68.12.0-1~deb9u1","1:68.12.0-1~deb9u2","1:68.2.1-1","1:68.2.2-1","1:68.2.2-1~deb10u1","1:68.2.2-1~deb8u1","1:68.2.2-1~deb9u1","1:68.3.0-1","1:68.3.0-2","1:68.3.0-2~deb10u1","1:68.3.0-2~deb8u1","1:68.3.0-2~deb9u1","1:68.3.1-1","1:68.4.1-1","1:68.4.1-1~deb10u1","1:68.4.1-1~deb8u1","1:68.4.1-1~deb9u1","1:68.4.2-1","1:68.5.0-1","1:68.5.0-1~deb10u1","1:68.5.0-1~deb8u1","1:68.5.0-1~deb9u1","1:68.6.0-1","1:68.6.0-1~deb10u1","1:68.6.0-1~deb8u1","1:68.6.0-1~deb9u1","1:68.7.0-1","1:68.7.0-1~deb10u1","1:68.7.0-1~deb8u1","1:68.7.0-1~deb9u1","1:68.8.0-1","1:68.8.0-1~deb10u1","1:68.8.0-1~deb8u1","1:68.8.0-1~deb9u1","1:68.8.1-1","1:68.9.0-1","1:68.9.0-1~deb10u1","1:68.9.0-1~deb8u1","1:68.9.0-1~deb8u2","1:68.9.0-1~deb9u1","1:76.0~b1-1","1:76.0~b2-1","1:77.0~b1-1","1:77.0~b2-1","1:77.0~b3-1","1:78.0-1","1:78.0.1-1","1:78.0~b1-1","1:78.0~b2-1","1:78.1.0-1","1:78.1.1-1","1:78.10.0-1","1:78.10.0-1~deb10u1","1:78.10.0-1~deb9u1","1:78.10.2-1","1:78.11.0-1","1:78.11.0-1~deb10u1","1:78.11.0-1~deb9u1","1:78.11.0-2","1:78.12.0-1","1:78.12.0-1~deb10u1","1:78.12.0-1~deb9u1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:78.2.0-1","1:78.2.1-1","1:78.2.2-1","1:78.3.1-1","1:78.3.1-2","1:78.3.1-2~deb10u1","1:78.3.1-2~deb10u2","1:78.3.1-2~deb9u1","1:78.3.2-1","1:78.3.3-1","1:78.4.0-1","1:78.4.0-1~deb10u1","1:78.4.0-1~deb9u1","1:78.4.1-1","1:78.4.2-1","1:78.4.2-1~deb10u1","1:78.4.2-1~deb9u1","1:78.5.0-1","1:78.5.0-1~deb10u1","1:78.5.0-1~deb9u1","1:78.5.1-1","1:78.5.1-1~deb10u1","1:78.5.1-1~deb9u1","1:78.6.0-1","1:78.6.0-1~deb10u1","1:78.6.0-1~deb9u1","1:78.6.1-1","1:78.7.0-1","1:78.7.0-1~deb10u1","1:78.7.0-1~deb9u1","1:78.7.1-1","1:78.8.0-1","1:78.8.0-1~deb10u1","1:78.8.0-1~deb9u1","1:78.9.0-1","1:78.9.0-1~deb10u1","1:78.9.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":20},{"source":"osv","ecosystem":"Debian:11","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0esr-1~deb11u1"}]}],"versions":["102.1.0esr-1","102.1.0esr-2","102.2.0esr-1","102.3.0esr-1","102.3.0esr-1~deb10u1","102.3.0esr-1~deb10u2","102.3.0esr-1~deb11u1","102.4.0esr-1","102.4.0esr-1~deb10u1","102.4.0esr-1~deb11u1","102.5.0esr-1","102.5.0esr-1~deb10u1","102.5.0esr-1~deb11u1","102.6.0esr-1","102.6.0esr-1~deb10u1","102.6.0esr-1~deb11u1","102.7.0esr-1","102.7.0esr-1~deb10u1","102.7.0esr-1~deb11u1","102.8.0esr-1~deb10u1","78.12.0esr-1","78.13.0esr-1","78.13.0esr-1~deb10u1","78.13.0esr-1~deb11u1","78.13.0esr-1~deb9u1","78.14.0esr-1","78.14.0esr-1~deb10u1","78.14.0esr-1~deb11u1","78.14.0esr-1~deb9u1","78.15.0esr-1~deb10u1","78.15.0esr-1~deb11u1","78.15.0esr-1~deb9u1","91.0.1esr-1","91.0esr-1","91.1.0esr-1","91.10.0esr-1","91.10.0esr-1~deb10u1","91.10.0esr-1~deb11u1","91.10.0esr-1~deb9u1","91.11.0esr-1","91.11.0esr-1~deb10u1","91.11.0esr-1~deb11u1","91.11.0esr-1~deb9u1","91.12.0esr-1","91.12.0esr-1~deb10u1","91.12.0esr-1~deb11u1","91.13.0esr-1~deb10u1","91.13.0esr-1~deb11u1","91.2.0esr-1","91.3.0esr-1","91.3.0esr-2","91.4.0esr-1","91.4.1esr-1~deb11u1","91.4.1esr-1~deb9u1","91.5.0esr-1","91.5.0esr-1~deb10u1","91.5.0esr-1~deb11u1","91.5.0esr-1~deb9u1","91.5.1esr-1","91.6.0esr-1","91.6.0esr-1~deb10u1","91.6.0esr-1~deb11u1","91.6.0esr-1~deb9u1","91.6.1esr-1","91.6.1esr-1~deb10u1","91.6.1esr-1~deb11u1","91.6.1esr-1~deb9u1","91.7.0esr-1","91.7.0esr-1~deb10u1","91.7.0esr-1~deb11u1","91.7.0esr-1~deb9u1","91.8.0esr-1","91.8.0esr-1~deb10u1","91.8.0esr-1~deb11u1","91.8.0esr-1~deb9u1","91.9.0esr-1","91.9.0esr-1~deb10u1","91.9.0esr-1~deb11u1","91.9.0esr-1~deb9u1","91.9.1esr-1","91.9.1esr-1~deb10u1","91.9.1esr-1~deb11u1","91.9.1esr-1~deb9u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1~deb10u1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":20},{"source":"osv","ecosystem":"Mageia:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.88.1-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-1.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el8_7"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.8.0-2.el9_1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.152.78.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-112.150.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150000.150.76.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150000.150.76.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150000.150.76.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.8.105.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.8.105.2"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-150200.8.105.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1","1:52.8.0+build1-0ubuntu0.18.04.1","1:52.9.1+build3-0ubuntu0.18.04.1","1:60.2.1+build1-0ubuntu0.18.04.2","1:60.4.0+build2-0ubuntu0.18.04.1","1:60.5.1+build2-0ubuntu0.18.04.1","1:60.6.1+build2-0ubuntu0.18.04.1","1:60.7.0+build1-0ubuntu0.18.04.1","1:60.7.1+build1-0ubuntu0.18.04.1","1:60.7.2+build2-0ubuntu0.18.04.1","1:60.8.0+build1-0ubuntu0.18.04.1","1:60.9.0+build1-0ubuntu0.18.04.1","1:68.2.1+build1-0ubuntu0.18.04.1","1:68.2.2+build1-0ubuntu0.18.04.1","1:68.4.1+build1-0ubuntu0.18.04.1","1:68.7.0+build1-0ubuntu0.18.04.1","1:68.8.0+build2-0ubuntu0.18.04.2","1:68.10.0+build1-0ubuntu0.18.04.1","1:78.8.1+build1-0ubuntu0.18.04.1","1:78.11.0+build1-0ubuntu0.18.04.2","1:78.13.0+build1-0ubuntu0.18.04.1","1:78.14.0+build1-0ubuntu0.18.04.1","1:78.14.0+build1-0ubuntu0.18.04.2","1:91.5.0+build1-0ubuntu0.18.04.1","1:91.7.0+build2-0ubuntu0.18.04.1","1:91.8.1+build1-0ubuntu0.18.04.1","1:91.9.1+build1-0ubuntu0.18.04.1","1:91.11.0+build2-0ubuntu0.18.04.1","1:102.2.2+build1-0ubuntu0.18.04.1","1:102.4.2+build2-0ubuntu0.18.04.1","1:102.7.1+build2-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.20.04.1"}]}],"versions":["1:68.1.2+build1-0ubuntu1","1:68.1.2+build1-0ubuntu2","1:68.2.1+build1-0ubuntu1","1:68.2.2+build1-0ubuntu1","1:68.3.0+build2-0ubuntu1","1:68.3.1+build1-0ubuntu2","1:68.4.1+build1-0ubuntu1","1:68.4.2+build2-0ubuntu1","1:68.5.0+build1-0ubuntu1","1:68.6.0+build2-0ubuntu1","1:68.7.0+build1-0ubuntu1","1:68.7.0+build1-0ubuntu2","1:68.8.0+build2-0ubuntu0.20.04.2","1:68.10.0+build1-0ubuntu0.20.04.1","1:78.7.1+build1-0ubuntu0.20.04.1","1:78.8.1+build1-0ubuntu0.20.04.1","1:78.11.0+build1-0ubuntu0.20.04.2","1:78.13.0+build1-0ubuntu0.20.04.2","1:78.14.0+build1-0ubuntu0.20.04.1","1:78.14.0+build1-0ubuntu0.20.04.2","1:91.5.0+build1-0ubuntu0.20.04.1","1:91.7.0+build2-0ubuntu0.20.04.1","1:91.8.1+build1-0ubuntu0.20.04.1","1:91.9.1+build1-0ubuntu0.20.04.1","1:91.11.0+build2-0ubuntu0.20.04.1","1:102.2.2+build1-0ubuntu0.20.04.1","1:102.4.2+build2-0ubuntu0.20.04.1","1:102.7.1+build2-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1","1:52.8.0+build1-0ubuntu0.18.04.1","1:52.9.1+build3-0ubuntu0.18.04.1","1:60.2.1+build1-0ubuntu0.18.04.2","1:60.4.0+build2-0ubuntu0.18.04.1","1:60.5.1+build2-0ubuntu0.18.04.1","1:60.6.1+build2-0ubuntu0.18.04.1","1:60.7.0+build1-0ubuntu0.18.04.1","1:60.7.1+build1-0ubuntu0.18.04.1","1:60.7.2+build2-0ubuntu0.18.04.1","1:60.8.0+build1-0ubuntu0.18.04.1","1:60.9.0+build1-0ubuntu0.18.04.1","1:68.2.1+build1-0ubuntu0.18.04.1","1:68.2.2+build1-0ubuntu0.18.04.1","1:68.4.1+build1-0ubuntu0.18.04.1","1:68.7.0+build1-0ubuntu0.18.04.1","1:68.8.0+build2-0ubuntu0.18.04.2","1:68.10.0+build1-0ubuntu0.18.04.1","1:78.8.1+build1-0ubuntu0.18.04.1","1:78.11.0+build1-0ubuntu0.18.04.2","1:78.13.0+build1-0ubuntu0.18.04.1","1:78.14.0+build1-0ubuntu0.18.04.1","1:78.14.0+build1-0ubuntu0.18.04.2","1:91.5.0+build1-0ubuntu0.18.04.1","1:91.7.0+build2-0ubuntu0.18.04.1","1:91.8.1+build1-0ubuntu0.18.04.1","1:91.9.1+build1-0ubuntu0.18.04.1","1:91.11.0+build2-0ubuntu0.18.04.1","1:102.2.2+build1-0ubuntu0.18.04.1","1:102.4.2+build2-0ubuntu0.18.04.1","1:102.7.1+build2-0ubuntu0.18.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.20.04.1"}]}],"versions":["1:68.1.2+build1-0ubuntu1","1:68.1.2+build1-0ubuntu2","1:68.2.1+build1-0ubuntu1","1:68.2.2+build1-0ubuntu1","1:68.3.0+build2-0ubuntu1","1:68.3.1+build1-0ubuntu2","1:68.4.1+build1-0ubuntu1","1:68.4.2+build2-0ubuntu1","1:68.5.0+build1-0ubuntu1","1:68.6.0+build2-0ubuntu1","1:68.7.0+build1-0ubuntu1","1:68.7.0+build1-0ubuntu2","1:68.8.0+build2-0ubuntu0.20.04.2","1:68.10.0+build1-0ubuntu0.20.04.1","1:78.7.1+build1-0ubuntu0.20.04.1","1:78.8.1+build1-0ubuntu0.20.04.1","1:78.11.0+build1-0ubuntu0.20.04.2","1:78.13.0+build1-0ubuntu0.20.04.2","1:78.14.0+build1-0ubuntu0.20.04.1","1:78.14.0+build1-0ubuntu0.20.04.2","1:91.5.0+build1-0ubuntu0.20.04.1","1:91.7.0+build2-0ubuntu0.20.04.1","1:91.8.1+build1-0ubuntu0.20.04.1","1:91.9.1+build1-0ubuntu0.20.04.1","1:91.11.0+build2-0ubuntu0.20.04.1","1:102.2.2+build1-0ubuntu0.20.04.1","1:102.4.2+build2-0ubuntu0.20.04.1","1:102.7.1+build2-0ubuntu0.20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.8.0+build2-0ubuntu0.22.04.1"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1"],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.8.0-1.1"}]}],"bundled":13}],"products":[{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2023-06/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-07/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368","tags":["x_transferred","Broken Link","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25746","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-06"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-07"},{"url":"https://github.com/advisories/GHSA-63m6-9qhj-8rqf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-25746","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0808","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25728","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25729","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25730","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25732","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25735","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25737","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25739","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25742","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25743","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25744","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25746","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170374","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170375","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170376","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170377","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170378","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170379","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170381","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170382","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170383","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170390","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170391","tags":["report"]},{"url":"https://bugzilla.redhat.com/2170402","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0808.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0810","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0810.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0821","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0616","tags":["report"]},{"url":"https://bugzilla.redhat.com/2171397","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0821.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0824","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0824.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-25746","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0056.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31556","tags":["report"]},{"url":"https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/hSYAJS__-rw","tags":["web"]},{"url":"https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/zleRGChurmo","tags":["web"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_88.html","tags":["web"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_88_1.html","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0057.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31561","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/102.8.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0805","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170402","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0805.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25728","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25728","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25728","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25729","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25729","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25729","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25730","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25730","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25730","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25732","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25732","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25732","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25735","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25735","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25735","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25737","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25737","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25737","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25739","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25739","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25739","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25742","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25742","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25742","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25742","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25743","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25743","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25743","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25744","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25744","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25744","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25746","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25746","tags":["article","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0806","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0806.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0807","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0807.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0808.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0809","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0809.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0810.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0811","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0811.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0812","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0812.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0817","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2171397","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0817.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0616","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0616","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0818","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0818.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0819","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0819.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0820","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0820.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0821.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0822","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0822.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0823","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0823.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0824.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0808","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170377","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0810","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0821","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0824","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230461-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208138","tags":["report"]},{"url":"https://bugzilla.suse.com/1208144","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25746","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230466-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230469-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230599-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0616","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-25746","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5943-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-0616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-25742","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T00:00:00Z","modified":"2025-01-09T19:15:06.53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:19.559321Z"}],"euvd":[{"id":"EUVD-2023-29653","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T00:00:00Z","modified":"2025-01-09T19:15:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:22.603579Z"}],"ghsa":[{"id":"GHSA-63m6-9qhj-8rqf","title":"Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR...","description":"Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T18:30:18Z","modified":"2024-04-04T04:30:17Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:56:24.450325Z"}],"nvd":[{"id":"CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T17:15:11.767Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:08:03.795015Z"}],"osv":[{"id":"ALPINE-CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T17:15:11.767Z","modified":"2026-11-03T06:32:58.952100706Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T17:15:11.767Z","modified":"2026-04-16T04:34:19.198771885Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-06-02T17:15:11.767Z","modified":"2026-10-24T09:47:37.770174936Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"RHSA-2023:0805","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:44:31Z","modified":"2025-11-22T12:45:50Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0806","title":"Red Hat Security Advisory: Mozilla Firefox security update","status":"published","published":"2024-09-16T10:43:33Z","modified":"2025-11-22T12:45:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0807","title":"Red Hat Security Advisory: Mozilla Firefox security update","status":"published","published":"2024-09-16T10:43:54Z","modified":"2025-11-22T12:45:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0808","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:44:21Z","modified":"2025-11-22T12:45:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0809","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:44:40Z","modified":"2025-11-22T12:45:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0810","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:44:12Z","modified":"2025-11-22T12:45:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0811","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:44:03Z","modified":"2025-11-22T12:45:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0812","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T10:43:43Z","modified":"2026-06-26T11:03:09Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0817","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:25Z","modified":"2026-06-26T11:03:10Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0818","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:15Z","modified":"2025-11-22T12:45:56Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0819","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:43Z","modified":"2025-11-22T12:45:56Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0820","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:45:57Z","modified":"2025-11-22T12:45:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0821","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:52Z","modified":"2025-11-22T12:45:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0822","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:07Z","modified":"2025-11-22T12:45:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0823","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:46:34Z","modified":"2025-11-22T12:45:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0824","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T10:47:02Z","modified":"2025-11-22T12:45:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2023:0808","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-22T01:08:53.668036Z","modified":"2026-02-04T23:30:03.002525Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0810","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-22T01:09:41.706793Z","modified":"2026-02-05T13:45:14.445121Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0821","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-22T01:08:53.668036Z","modified":"2026-02-04T14:45:03.586734Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0824","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-22T01:09:41.706793Z","modified":"2026-02-05T12:15:08.550725Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2023-25746","description":"Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 102.8 and Firefox ESR \u003c 102.8.","status":"published","published":"2023-02-15T00:00:00Z","modified":"2026-04-22T14:04:08.109428Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:0808","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-20T00:00:00Z","modified":"2026-10-29T11:01:34.380363767Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0810","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 102.8.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-20T00:00:00Z","modified":"2026-10-29T11:31:23.228334915Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0821","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-20T00:00:00Z","modified":"2026-10-29T11:01:34.424992171Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0824","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.8.0.\n\nSecurity Fix(es):\n\n* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)\n* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)\n* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)\n* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)\n* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)\n* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)\n* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)\n* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)\n* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)\n* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)\n* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)\n* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)\n* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-02-20T00:00:00Z","modified":"2026-10-29T11:31:24.398096422Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3319-1","title":"firefox-esr - security update","status":"published","published":"2023-02-16T00:00:00Z","modified":"2026-03-09T01:23:27.042451Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3324-1","title":"thunderbird - security update","status":"published","published":"2023-02-20T00:00:00Z","modified":"2026-03-09T01:20:32.438941Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5350-1","title":"firefox-esr - security update","status":"published","published":"2023-02-15T00:00:00Z","modified":"2026-03-09T02:10:26.713894Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"DSA-5355-1","title":"thunderbird - security update","status":"published","published":"2023-02-18T00:00:00Z","modified":"2026-03-09T02:09:25.467114Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2023-0056","title":"Updated firefox packages fix security vulnerability","description":"An attacker could construct a PKCS 12 cert bundle in such a way that could\nallow for arbitrary memory writes via PKCS 12 Safe Bag attributes being\nmishandled (CVE-2023-0767).\n\nThe Content-Security-Policy-Report-Only header could allow an attacker to leak\na child iframe's unredacted URI when interaction with that iframe triggers a\nredirect (CVE-2023-25728).\n\nPermission prompts for opening external schemes were only shown for\nContentPrincipals resulting in extensions being able to open them without user\ninteraction via ExpandedPrincipals. This could lead to further malicious\nactions such as downloading files or interacting with software already\ninstalled on the system (CVE-2023-25729).\n\nA background script invoking requestFullscreen and then blocking the main\nthread could force the browser into fullscreen mode indefinitely, resulting in\npotential user confusion or spoofing attacks (CVE-2023-25730).\n\nIn EncodeInputStream, wen encoding data from an inputStream in xpcom the size\nof the input being encoded was not correctly calculated potentially leading\nto an out of bounds memory write (CVE-2023-25732).\n\nIn SpiderMonkey, cross-compartment wrappers wrapping a scripted proxy could\nhave caused objects from other compartments to be stored in the main\ncompartment resulting in a use-after-free after unwrapping the proxy\n(CVE-2023-25735).\n\nAn invalid downcast from nsTextNode to SVGElement in\nSVGUtils::SetupStrokeGeometry could have lead to undefined behavior\n(CVE-2023-25737).\n\nModule load requests that failed were not being checked as to whether or not\nthey were cancelled causing a use-after-free in\nmozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739).\n\nIn Web Crypto, when importing a SPKI RSA public key as ECDSA P-256, the key\nwould be handled incorrectly causing the tab to crash (CVE-2023-25742).\n\nMozilla developers Philipp and Gabriele Svelto, Kershaw Chang, and the Mozilla\nFuzzing Team reported memory safety bugs present in Firefox ESR 102.7. Some of\nthese bugs showed evidence of memory corruption and we presume that with\nenough effort some of these could have been exploited to run arbitrary code\n(CVE-2023-25744, CVE-2023-25746).\n","status":"published","published":"2023-02-20T21:25:36Z","modified":"2026-04-16T04:42:43.178540841Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"MGASA-2023-0057","title":"Updated thunderbird packages fix security vulnerability","description":"User Interface lockup with messages combining S/MIME and OpenPGP.\n(CVE-2023-0616)\n\nContent security policy leak in violation reports using iframes.\n(CVE-2023-25728)\n\nScreen hijack via browser fullscreen mode. (CVE-2023-25730)\n\nArbitrary memory write via PKCS 12 in NSS. (CVE-2023-0767)\n\nPotential use-after-free from compartment mismatch in SpiderMonkey.\n(CVE-2023-25735)\n\nInvalid downcast in SVGUtils::SetupStrokeGeometry. (CVE-2023-25737)\n\nUse-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.\n(CVE-2023-25739)\n\nExtensions could have opened external schemes without user knowledge.\n(CVE-2023-25729)\n\nOut of bounds memory write from EncodeInputStream. (CVE-2023-25732)\n\nWeb Crypto ImportKey crashes tab. (CVE-2023-25742)\n\nMemory safety bugs fixed in Thunderbird 102.8. (CVE-2023-25746)\n","status":"published","published":"2023-02-20T21:25:36Z","modified":"2026-04-16T04:40:39.236861503Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12702-1","title":"libmozjs-102-0-102.8.0-1.1 on GA media","description":"These are all security issues fixed in the libmozjs-102-0-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:03:31.221884Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12713-1","title":"MozillaThunderbird-102.8.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:23:58.973202Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0461-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\n  Updated to version 102.8.0 ESR (bsc#1208144):\n\n  - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.\n  - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.\n  - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.\n  - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.\n  - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.\n  - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.\n  - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.\n  - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.\n  - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.\n  - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.\n  - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.\n  - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.\n  - CVE-2023-25744: Fixed Memory safety bugs.\n  - CVE-2023-25746: Fixed Memory safety bugs.\n\n","status":"published","published":"2023-02-20T13:36:24Z","modified":"2026-02-04T03:51:51.572339Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0466-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\n  Updated to version 102.8.0 ESR (bsc#1208144):\n\n  - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.\n  - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.\n  - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.\n  - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.\n  - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.\n  - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.\n  - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.\n  - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.\n  - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.\n  - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.\n  - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.\n  - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.\n  - CVE-2023-25744: Fixed Memory safety bugs.\n  - CVE-2023-25746: Fixed Memory safety bugs.\n","status":"published","published":"2023-02-21T08:08:50Z","modified":"2026-02-04T03:19:06.59089Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0469-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\n  Updated to version 102.8.0 ESR (bsc#1208144):\n\n  - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.\n  - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.\n  - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.\n  - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.\n  - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.\n  - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.\n  - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.\n  - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.\n  - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.\n  - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.\n  - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.\n  - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.\n  - CVE-2023-25744: Fixed Memory safety bugs.\n  - CVE-2023-25746: Fixed Memory safety bugs.\n\n","status":"published","published":"2023-02-21T09:04:10Z","modified":"2026-02-04T04:31:03.931699Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0599-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\n  Updated Mozilla Thunderbird to version 102.8.0 (bsc#1208144):\n  - CVE-2023-0616: Fixed User Interface lockup via messages combining S/MIME and OpenPGP.\n  - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.\n  - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.\n  - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.\n  - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.\n  - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.\n  - CVE-2023-25738: Fixed printing on Windows could potentially crash Thunderbird with some device drivers.\n  - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.\n  - CVE-2023-25729: Fixed vulnerability where extensions could have opened external schemes without user knowledge.\n  - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.\n  - CVE-2023-25734: Fixed issue where opening local .url files could cause unexpected network loads.\n  - CVE-2023-25742: Fixed tab crashing caused by Web Crypto ImportKey.\n  - CVE-2023-25746: Fixed memory safety bugs.\n\n","status":"published","published":"2023-03-02T13:52:14Z","modified":"2026-02-04T02:18:58.381421Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5943-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context, an\nattacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, cross-site\ntracing, or execute arbitrary code. (CVE-2023-0616, CVE-2023-25735,\nCVE-2023-25737, CVE-2023-25739, CVE-2023-25729, CVE-2023-25742,\nCVE-2023-25746) \n\nJohan Carlsson discovered that Thunderbird did not properly implement CSP\npolicy on a header when using iframes. An attacker could potentially\nexploits this to exfiltrate data. (CVE-2023-25728)\n\nIrvan Kurniawan discovered that Thunderbird was not properly handling\nbackground fullscreen scripts when the window goes into fullscreen mode.\nAn attacker could possibly use this issue to spoof the user and obtain\nsensitive information. (CVE-2023-25730)\n\nChristian Holler discovered that Thunderbird did not properly check the\nSafe Bag attributes in PKCS 12 certificate bundle. An attacker could\npossibly use this issue to write to arbitrary memory by sending malicious\nPKCS 12 certificate. (CVE-2023-0767)\n\nRonald Crane discovered that Thunderbird did not properly check the size of\nthe input being encoded in xpcom. An attacker could possibly use this issue\nto perform out of bound memory write operations. (CVE-2023-25732)\n","status":"published","published":"2023-03-13T04:00:01Z","modified":"2026-04-22T10:33:50.325156Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}