{"id":"CVE-2023-37206","aliases":["ALPINE-CVE-2023-37206","EUVD-2023-41126","GHSA-gwxw-rj4r-jxqv","OESA-2025-1265","OESA-2025-1268","SUSE-SU-2023:2849-1","SUSE-SU-2023:2850-1","SUSE-SU-2023:2886-1","UBUNTU-CVE-2023-37206","USN-6201-1","openSUSE-SU-2024:13037-1","openSUSE-SU-2024:14572-1"],"status":"published","title":"Uploading files which contain symlinks may have allowed an attacker to trick a user into...","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00715,"percentile":0.54,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2023-07-05T09:02:02Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"firefox-esr","fixed_in":["115.0-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"firefox","fixed_in":["115.0+build2-0ubuntu0.20.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-r0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.8.0-1.oe2203sp4"}]}],"bundled":187},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.8.0-1.oe2203sp3"}]}],"bundled":187},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150000.150.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150000.4.25.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150000.150.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150000.4.25.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150000.150.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150000.4.25.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-112.165.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-35.12.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-150200.152.93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115-150200.9.13.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0+build2-0ubuntu0.20.04.3"}]}],"versions":["69.0.3+build1-0ubuntu1","70.0+build2-0ubuntu1","70.0+build2-0ubuntu2","70.0.1+build1-0ubuntu2","71.0+build2-0ubuntu2","71.0+build5-0ubuntu1","72.0.1+build1-0ubuntu1","72.0.2+build1-0ubuntu1","73.0+build1-0ubuntu1","73.0+build2-0ubuntu1","73.0+build3-0ubuntu1","73.0.1+build1-0ubuntu1","74.0+build1-0ubuntu1","74.0+build2-0ubuntu1","74.0+build2-0ubuntu2","74.0+build3-0ubuntu1","75.0+build3-0ubuntu1","76.0+build2-0ubuntu0.20.04.1","76.0.1+build1-0ubuntu0.20.04.1","77.0.1+build1-0ubuntu0.20.04.1","78.0.1+build1-0ubuntu0.20.04.1","78.0.2+build2-0ubuntu0.20.04.1","79.0+build1-0ubuntu0.20.04.1","80.0+build2-0ubuntu0.20.04.1","80.0.1+build1-0ubuntu0.20.04.1","81.0+build2-0ubuntu0.20.04.1","81.0.2+build1-0ubuntu0.20.04.1","82.0+build2-0ubuntu0.20.04.1","82.0.2+build1-0ubuntu0.20.04.1","82.0.3+build1-0ubuntu0.20.04.1","83.0+build2-0ubuntu0.20.04.1","84.0+build3-0ubuntu0.20.04.1","84.0.1+build1-0ubuntu0.20.04.1","84.0.2+build1-0ubuntu0.20.04.1","85.0+build1-0ubuntu0.20.04.1","85.0.1+build1-0ubuntu0.20.04.1","86.0+build3-0ubuntu0.20.04.1","86.0.1+build1-0ubuntu0.20.04.1","87.0+build3-0ubuntu0.20.04.2","88.0+build2-0ubuntu0.20.04.1","88.0.1+build1-0ubuntu0.20.04.2","89.0+build2-0ubuntu0.20.04.2","89.0.1+build1-0ubuntu0.20.04.1","89.0.2+build1-0ubuntu0.20.04.1","90.0+build1-0ubuntu0.20.04.1","90.0.2+build1-0ubuntu0.20.04.1","91.0+build2-0ubuntu0.20.04.1","91.0.1+build1-0ubuntu0.20.04.1","91.0.2+build1-0ubuntu0.20.04.1","92.0+build3-0ubuntu0.20.04.1","93.0+build1-0ubuntu0.20.04.1","94.0+build3-0ubuntu0.20.04.1","95.0+build1-0ubuntu0.20.04.1","95.0.1+build2-0ubuntu0.20.04.1","96.0+build2-0ubuntu0.20.04.1","97.0+build2-0ubuntu0.20.04.1","97.0.2+build1-0ubuntu0.20.04.1","98.0+build3-0ubuntu0.20.04.2","98.0.1+build2-0ubuntu0.20.04.1","98.0.2+build1-0ubuntu0.20.04.1","99.0+build2-0ubuntu0.20.04.2","100.0+build2-0ubuntu0.20.04.1","100.0.2+build1-0ubuntu0.20.04.1","101.0.1+build1-0ubuntu0.20.04.1","102.0+build2-0ubuntu0.20.04.1","103.0+build1-0ubuntu0.20.04.1","104.0+build3-0ubuntu0.20.04.1","105.0+build2-0ubuntu0.20.04.1","106.0.2+build1-0ubuntu0.20.04.1","106.0.5+build1-0ubuntu0.20.04.1","107.0+build2-0ubuntu0.20.04.1","108.0+build2-0ubuntu0.20.04.1","108.0.1+build1-0ubuntu0.20.04.1","108.0.2+build1-0ubuntu0.20.04.1","109.0+build2-0ubuntu0.20.04.1","109.0.1+build1-0ubuntu0.20.04.2","110.0+build3-0ubuntu0.20.04.1","110.0.1+build2-0ubuntu0.20.04.1","111.0+build2-0ubuntu0.20.04.1","111.0.1+build2-0ubuntu0.20.04.1","112.0+build2-0ubuntu0.20.04.1","112.0.1+build1-0ubuntu0.20.04.1","112.0.2+build1-0ubuntu0.20.04.1","113.0+build2-0ubuntu0.20.04.1","113.0.1+build1-0ubuntu0.20.04.1","113.0.2+build1-0ubuntu0.20.04.1","114.0+build3-0ubuntu0.20.04.1","114.0.1+build1-0ubuntu0.20.04.1","114.0.2+build1-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0+build2-0ubuntu0.20.04.3"}]}],"versions":["69.0.3+build1-0ubuntu1","70.0+build2-0ubuntu1","70.0+build2-0ubuntu2","70.0.1+build1-0ubuntu2","71.0+build2-0ubuntu2","71.0+build5-0ubuntu1","72.0.1+build1-0ubuntu1","72.0.2+build1-0ubuntu1","73.0+build1-0ubuntu1","73.0+build2-0ubuntu1","73.0+build3-0ubuntu1","73.0.1+build1-0ubuntu1","74.0+build1-0ubuntu1","74.0+build2-0ubuntu1","74.0+build2-0ubuntu2","74.0+build3-0ubuntu1","75.0+build3-0ubuntu1","76.0+build2-0ubuntu0.20.04.1","76.0.1+build1-0ubuntu0.20.04.1","77.0.1+build1-0ubuntu0.20.04.1","78.0.1+build1-0ubuntu0.20.04.1","78.0.2+build2-0ubuntu0.20.04.1","79.0+build1-0ubuntu0.20.04.1","80.0+build2-0ubuntu0.20.04.1","80.0.1+build1-0ubuntu0.20.04.1","81.0+build2-0ubuntu0.20.04.1","81.0.2+build1-0ubuntu0.20.04.1","82.0+build2-0ubuntu0.20.04.1","82.0.2+build1-0ubuntu0.20.04.1","82.0.3+build1-0ubuntu0.20.04.1","83.0+build2-0ubuntu0.20.04.1","84.0+build3-0ubuntu0.20.04.1","84.0.1+build1-0ubuntu0.20.04.1","84.0.2+build1-0ubuntu0.20.04.1","85.0+build1-0ubuntu0.20.04.1","85.0.1+build1-0ubuntu0.20.04.1","86.0+build3-0ubuntu0.20.04.1","86.0.1+build1-0ubuntu0.20.04.1","87.0+build3-0ubuntu0.20.04.2","88.0+build2-0ubuntu0.20.04.1","88.0.1+build1-0ubuntu0.20.04.2","89.0+build2-0ubuntu0.20.04.2","89.0.1+build1-0ubuntu0.20.04.1","89.0.2+build1-0ubuntu0.20.04.1","90.0+build1-0ubuntu0.20.04.1","90.0.2+build1-0ubuntu0.20.04.1","91.0+build2-0ubuntu0.20.04.1","91.0.1+build1-0ubuntu0.20.04.1","91.0.2+build1-0ubuntu0.20.04.1","92.0+build3-0ubuntu0.20.04.1","93.0+build1-0ubuntu0.20.04.1","94.0+build3-0ubuntu0.20.04.1","95.0+build1-0ubuntu0.20.04.1","95.0.1+build2-0ubuntu0.20.04.1","96.0+build2-0ubuntu0.20.04.1","97.0+build2-0ubuntu0.20.04.1","97.0.2+build1-0ubuntu0.20.04.1","98.0+build3-0ubuntu0.20.04.2","98.0.1+build2-0ubuntu0.20.04.1","98.0.2+build1-0ubuntu0.20.04.1","99.0+build2-0ubuntu0.20.04.2","100.0+build2-0ubuntu0.20.04.1","100.0.2+build1-0ubuntu0.20.04.1","101.0.1+build1-0ubuntu0.20.04.1","102.0+build2-0ubuntu0.20.04.1","103.0+build1-0ubuntu0.20.04.1","104.0+build3-0ubuntu0.20.04.1","105.0+build2-0ubuntu0.20.04.1","106.0.2+build1-0ubuntu0.20.04.1","106.0.5+build1-0ubuntu0.20.04.1","107.0+build2-0ubuntu0.20.04.1","108.0+build2-0ubuntu0.20.04.1","108.0.1+build1-0ubuntu0.20.04.1","108.0.2+build1-0ubuntu0.20.04.1","109.0+build2-0ubuntu0.20.04.1","109.0.1+build1-0ubuntu0.20.04.2","110.0+build3-0ubuntu0.20.04.1","110.0.1+build2-0ubuntu0.20.04.1","111.0+build2-0ubuntu0.20.04.1","111.0.1+build2-0ubuntu0.20.04.1","112.0+build2-0ubuntu0.20.04.1","112.0.1+build1-0ubuntu0.20.04.1","112.0.2+build1-0ubuntu0.20.04.1","113.0+build2-0ubuntu0.20.04.1","113.0.1+build1-0ubuntu0.20.04.1","113.0.2+build1-0ubuntu0.20.04.1","114.0+build3-0ubuntu0.20.04.1","114.0.1+build1-0ubuntu0.20.04.1","114.0.2+build1-0ubuntu0.20.04.1"],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.5.1-1.1"}]}],"bundled":1860}],"products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1813299","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-22/","tags":["x_transferred","Vendor Advisory","report"]},{"url":"https://security.gentoo.org/glsa/202401-10","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37206","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gwxw-rj4r-jxqv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-37206","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25733","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25736","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0743","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10463","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10941","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3855","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4770","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5697","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8382","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9396","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1938","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1268","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232849-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212101","tags":["report"]},{"url":"https://bugzilla.suse.com/1212438","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37212","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232850-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232886-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-37206","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/#CVE-2023-37206","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6201-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-37212","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9680","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-37206","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T09:02:02.43Z","modified":"2025-02-13T16:56:34.742Z","updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-41126","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T09:02:02Z","modified":"2025-02-13T16:56:34Z","updated_at":"2026-11-03T00:03:50.021705Z"}],"ghsa":[{"id":"GHSA-gwxw-rj4r-jxqv","title":"Uploading files which contain symlinks may have allowed an attacker to trick a user into...","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T12:30:15Z","modified":"2024-01-16T05:05:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:55:25.607975Z"}],"nvd":[{"id":"CVE-2023-37206","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T10:15:09.867Z","modified":"2026-06-17T06:07:43.47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"ALPINE-CVE-2023-37206","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T10:15:09.867Z","modified":"2026-11-03T06:32:42.957426939Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"OESA-2025-1265","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\n\nWhen loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox \u0026lt; 103.(CVE-2022-36315)\n\nWhen using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox \u0026lt; 103.(CVE-2022-36316)\n\nAn attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox \u0026lt; 104.(CVE-2022-38475)\n\nService Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-45417)\n\nIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-45419)\n\nMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 107. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 108.(CVE-2022-46879)\n\nMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.\u0026lt;br /\u0026gt;*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-46883)\n\nDue to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25731)\n\nThe return value from `gfx::SourceSurfaceSkia::Map()` wasn\u0026apos;t being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25733)\n\nAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25736)\n\nUnder certain circumstances, a ServiceWorker\u0026apos;s offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-25750)\n\nWhen following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-28160)\n\nMemory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-28177)\n\nMultiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29537)\n\nUnder specific circumstances a WebExtension may have received a \u0026lt;code\u0026gt;jar:file:///\u0026lt;/code\u0026gt; URI instead of a \u0026lt;code\u0026gt;moz-extension:///\u0026lt;/code\u0026gt; URI during a load request. This leaked directory paths on the user\u0026apos;s machine. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29538)\n\nUsing a redirect embedded into \u0026lt;code\u0026gt;sourceMappingUrls\u0026lt;/code\u0026gt; could allow for navigation to external protocol links in sandboxed iframes without \u0026lt;code\u0026gt;allow-top-navigation-to-custom-protocols\u0026lt;/code\u0026gt;. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29540)\n\nWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29547)\n\nUnder certain circumstances, a call to the \u0026lt;code\u0026gt;bind\u0026lt;/code\u0026gt; function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29549)\n\nService workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32208)\n\nA maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32209)\n\nDocuments were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32210)\n\nWhen choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an \u0026quot;open redirect\u0026quot;. Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox \u0026lt; 114.(CVE-2023-34415)\n\nMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 114.(CVE-2023-34417)\n\nWhen Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of \u0026apos;about:blank\u0026apos;. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-3482)\n\nDuring the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 115.0.2, Firefox ESR \u0026lt; 115.0.2, and Thunderbird \u0026lt; 115.0.1.(CVE-2023-3600)\n\nInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files.  This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37203)\n\nA website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37204)\n\nThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37205)\n\nUploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37206)\n\nA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained.  This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37209)\n\nA website could prevent a user from exiting full-screen mode via alert and prompt calls.  This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37210)\n\nMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37212)\n\nA website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4051)\n\nA website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4053)\n\nMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 116.(CVE-2023-4058)\n\nWhen `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4577)\n\nWhen calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4578)\n\nSearch queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox \u0026lt; 117.(CVE-2023-4579)\n\nPush notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4580)\n\nDue to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. \n*This bug only affects Firefox on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4582)\n\nWhen checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4583)\n\nMemory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4585)\n\nA compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5169)\n\nIn canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5170)\n\nDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5171)\n\nA hashtable  in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5172)\n\nIn a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. \n*This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.* This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5173)\n\nDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5175)\n\nMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5176)\n\nNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2023-5388)\n\nIt was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5721)\n\nUsing iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5722)\n\nAn attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led to unknown errors. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5723)\n\nDrivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5724)\n\nA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5725)\n\nDuring garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5728)\n\nA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5729)\n\nMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5730)\n\nMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5731)\n\nAn attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5732)\n\nOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6204)\n\nIt was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6205)\n\nThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6206)\n\nA use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6859)\n\nThe `VideoBridge` allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6860)\n\nThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6863)\n\nTypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox \u0026lt; 121.(CVE-2023-6866)\n\nA `\u0026amp;lt;dialog\u0026gt;` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox \u0026lt; 121.(CVE-2023-6869)\n\nAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 122, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-0743)\n\nA compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox \u0026lt; 122.(CVE-2024-0748)\n\nSome WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox \u0026lt; 122.(CVE-2024-0754)\n\nA permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10458)\n\nAn attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10459)\n\nThe origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10460)\n\nIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10461)\n\nTruncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10462)\n\nVideo frames could have been leaked between origins in some situations. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10463)\n\nRepeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10464)\n\nA clipboard \u0026quot;paste\u0026quot; button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10465)\n\nBy sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10466)\n\nMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10467)\n\nA malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-10941)\n\nThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website\u0026apos;s URL shown). This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1547)\n\nA website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1548)\n\nIf a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1549)\n\nA malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user\u0026apos;s mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1550)\n\nSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1551)\n\nMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1553)\n\nThe `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain.  Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1554)\n\nWhen opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1555)\n\nThe incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1556)\n\nMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1557)\n\nPassing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2606)\n\nReturn registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2607)\n\n`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2608)\n\nThe permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-2609)\n\nUsing a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2610)\n\nA missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2611)\n\nIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2612)\n\nData was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2613)\n\nMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2614)\n\nMemory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2615)\n\nTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR \u0026lt; 115.9 and Thunderbird \u0026lt; 115.9.(CVE-2024-2616)\n\nAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox \u0026lt; 124.0.1.(CVE-2024-29943)\n\nAn attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox \u0026lt; 124.0.1 and Firefox ESR \u0026lt; 115.9.1.(CVE-2024-29944)\n\nThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3302)\n\nGetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3852)\n\nA use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3853)\n\nIn some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3854)\n\nIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3855)\n\nA use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3856)\n\nThe JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3857)\n\nIt was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3858)\n\nOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3859)\n\nAn out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3860)\n\nIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3861)\n\nThe MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3862)\n\nMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3864)\n\nMemory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3865)\n\nIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2024-43097)\n\nA type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4367)\n\nMultiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4764)\n\nIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4767)\n\nA bug in popup notifications\u0026apos; interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4768)\n\nWhen importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses.  This could have been abused to learn information cross-origin. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4769)\n\nWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4770)\n\nA memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4771)\n\nAn HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4772)\n\nWhen a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4773)\n\nAn iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4775)\n\nA file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4776)\n\nMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4777)\n\nMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4778)\n\nIf a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5688)\n\nBy monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user\u0026apos;s system. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5690)\n\nBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5691)\n\nOffscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5693)\n\nBy manipulating the text in an `\u0026amp;lt;input\u0026amp;gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5696)\n\nA website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox \u0026lt; 127.(CVE-2024-5697)\n\nA race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6601)\n\nA mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6602)\n\nIn an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6603)\n\nMemory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6604)\n\nFirefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox \u0026lt; 128.(CVE-2024-6605)\n\nClipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6606)\n\nIt was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `\u0026amp;lt;select\u0026amp;gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6607)\n\nIt was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6608)\n\nWhen almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6609)\n\nForm validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6610)\n\nA nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6611)\n\nCSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6612)\n\nThe frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6613)\n\nThe frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6614)\n\nMemory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6615)\n\nInsufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7519)\n\nIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7521)\n\nEditor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7522)\n\nFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.  On a site protected by Content Security Policy in \u0026quot;strict-dynamic\u0026quot; mode, an attacker able to inject an HTML element could have used a DOM Clobbering attack on some of the shims and achieved XSS, bypassing the CSP strict-dynamic protection. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, and Firefox ESR \u0026lt; 128.1.(CVE-2024-7524)\n\nIt was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7525)\n\nANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7526)\n\nUnexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7527)\n\nThe date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7529)\n\nCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcome is connection failure, but if the connection persists despite the high packet loss it could be possible for a network observer to identify packets as coming from the same source despite a network path change. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, and Firefox ESR \u0026lt; 128.1.(CVE-2024-7531)\n\nAn error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-7652)\n\nA potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8381)\n\nInternal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8382)\n\nFirefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing so for the Usenet-related schemes news: and snews:. Since most operating systems don\u0026apos;t have a trusted newsreader installed by default, an unscrupulous program that the user downloaded could register itself as a handler. The website that served the application download could then launch that application at will. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, and Firefox ESR \u0026lt; 115.15.(CVE-2024-8383)\n\nThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8384)\n\nA compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9392)\n\nAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \u0026quot;same site\u0026quot; documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9393)\n\nAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \u0026quot;same site\u0026quot; documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9394)\n\nIt is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9396)\n\nA missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9397)\n\nBy checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9398)\n\nA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9399)\n\nA potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9400)\n\nMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9401)\n\nMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9402)\n\nAn attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u0026lt; 131.0.2, Firefox ESR \u0026lt; 128.3.1, Firefox ESR \u0026lt; 115.16.1, Thunderbird \u0026lt; 131.0.1, Thunderbird \u0026lt; 128.3.1, and Thunderbird \u0026lt; 115.16.0.(CVE-2024-9680)\n\nIt was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1931)\n\nAn inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1932)\n\nOn 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1933)\n\nIt was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1934)\n\nA web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1935)\n\njar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1936)\n\nMemory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1937)\n\nMemory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1938)","status":"published","published":"2025-03-14T11:08:21Z","modified":"2026-08-18T01:18:48.878452662Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1268","title":"firefox security update","description":"Mozilla Firefox is a standalone web browser, designed for standards compliance and performance.  Its functionality can be enhanced via a plethora of extensions.\r\n\r\nSecurity Fix(es):\n\nWhen loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox \u0026lt; 103.(CVE-2022-36315)\n\nWhen using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox \u0026lt; 103.(CVE-2022-36316)\n\nAn attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox \u0026lt; 104.(CVE-2022-38475)\n\nService Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-45417)\n\nIf the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-45419)\n\nMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 107. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 108.(CVE-2022-46879)\n\nMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.\u0026lt;br /\u0026gt;*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox \u0026lt; 107.(CVE-2022-46883)\n\nDue to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25731)\n\nThe return value from `gfx::SourceSurfaceSkia::Map()` wasn\u0026apos;t being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25733)\n\nAn invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox \u0026lt; 110.(CVE-2023-25736)\n\nUnder certain circumstances, a ServiceWorker\u0026apos;s offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-25750)\n\nWhen following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-28160)\n\nMemory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 111.(CVE-2023-28177)\n\nMultiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29537)\n\nUnder specific circumstances a WebExtension may have received a \u0026lt;code\u0026gt;jar:file:///\u0026lt;/code\u0026gt; URI instead of a \u0026lt;code\u0026gt;moz-extension:///\u0026lt;/code\u0026gt; URI during a load request. This leaked directory paths on the user\u0026apos;s machine. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29538)\n\nUsing a redirect embedded into \u0026lt;code\u0026gt;sourceMappingUrls\u0026lt;/code\u0026gt; could allow for navigation to external protocol links in sandboxed iframes without \u0026lt;code\u0026gt;allow-top-navigation-to-custom-protocols\u0026lt;/code\u0026gt;. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29540)\n\nWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29547)\n\nUnder certain circumstances, a call to the \u0026lt;code\u0026gt;bind\u0026lt;/code\u0026gt; function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android \u0026lt; 112, Firefox \u0026lt; 112, and Focus for Android \u0026lt; 112.(CVE-2023-29549)\n\nService workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32208)\n\nA maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32209)\n\nDocuments were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox \u0026lt; 113.(CVE-2023-32210)\n\nWhen choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an \u0026quot;open redirect\u0026quot;. Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox \u0026lt; 114.(CVE-2023-34415)\n\nMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 114.(CVE-2023-34417)\n\nWhen Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of \u0026apos;about:blank\u0026apos;. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-3482)\n\nDuring the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 115.0.2, Firefox ESR \u0026lt; 115.0.2, and Thunderbird \u0026lt; 115.0.1.(CVE-2023-3600)\n\nInsufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files.  This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37203)\n\nA website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37204)\n\nThe use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37205)\n\nUploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37206)\n\nA use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained.  This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37209)\n\nA website could prevent a user from exiting full-screen mode via alert and prompt calls.  This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37210)\n\nMemory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 115.(CVE-2023-37212)\n\nA website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4051)\n\nA website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 116, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4053)\n\nMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 116.(CVE-2023-4058)\n\nWhen `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4577)\n\nWhen calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4578)\n\nSearch queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox \u0026lt; 117.(CVE-2023-4579)\n\nPush notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4580)\n\nDue to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. \n*This bug only affects Firefox on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4582)\n\nWhen checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4583)\n\nMemory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.2, and Thunderbird \u0026lt; 115.2.(CVE-2023-4585)\n\nA compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5169)\n\nIn canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5170)\n\nDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5171)\n\nA hashtable  in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5172)\n\nIn a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. \n*This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.* This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5173)\n\nDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 118.(CVE-2023-5175)\n\nMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 118, Firefox ESR \u0026lt; 115.3, and Thunderbird \u0026lt; 115.3.(CVE-2023-5176)\n\nNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2023-5388)\n\nIt was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5721)\n\nUsing iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5722)\n\nAn attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led to unknown errors. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5723)\n\nDrivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5724)\n\nA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5725)\n\nDuring garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5728)\n\nA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5729)\n\nMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 119, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5730)\n\nMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 119.(CVE-2023-5731)\n\nAn attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox \u0026lt; 117, Firefox ESR \u0026lt; 115.4, and Thunderbird \u0026lt; 115.4.1.(CVE-2023-5732)\n\nOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6204)\n\nIt was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6205)\n\nThe black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox \u0026lt; 120, Firefox ESR \u0026lt; 115.5.0, and Thunderbird \u0026lt; 115.5.(CVE-2023-6206)\n\nA use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6859)\n\nThe `VideoBridge` allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6860)\n\nThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR \u0026lt; 115.6, Thunderbird \u0026lt; 115.6, and Firefox \u0026lt; 121.(CVE-2023-6863)\n\nTypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox \u0026lt; 121.(CVE-2023-6866)\n\nA `\u0026amp;lt;dialog\u0026gt;` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox \u0026lt; 121.(CVE-2023-6869)\n\nAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 122, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-0743)\n\nA compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox \u0026lt; 122.(CVE-2024-0748)\n\nSome WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox \u0026lt; 122.(CVE-2024-0754)\n\nA permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10458)\n\nAn attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10459)\n\nThe origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10460)\n\nIn multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10461)\n\nTruncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10462)\n\nVideo frames could have been leaked between origins in some situations. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Firefox ESR \u0026lt; 115.17, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10463)\n\nRepeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10464)\n\nA clipboard \u0026quot;paste\u0026quot; button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10465)\n\nBy sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10466)\n\nMemory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 132, Firefox ESR \u0026lt; 128.4, Thunderbird \u0026lt; 128.4, and Thunderbird \u0026lt; 132.(CVE-2024-10467)\n\nA malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-10941)\n\nThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website\u0026apos;s URL shown). This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1547)\n\nA website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1548)\n\nIf a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1549)\n\nA malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user\u0026apos;s mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1550)\n\nSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1551)\n\nMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 123, Firefox ESR \u0026lt; 115.8, and Thunderbird \u0026lt; 115.8.(CVE-2024-1553)\n\nThe `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain.  Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1554)\n\nWhen opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1555)\n\nThe incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1556)\n\nMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 123.(CVE-2024-1557)\n\nPassing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2606)\n\nReturn registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2607)\n\n`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2608)\n\nThe permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-2609)\n\nUsing a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2610)\n\nA missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2611)\n\nIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2612)\n\nData was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2613)\n\nMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 124, Firefox ESR \u0026lt; 115.9, and Thunderbird \u0026lt; 115.9.(CVE-2024-2614)\n\nMemory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 124.(CVE-2024-2615)\n\nTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR \u0026lt; 115.9 and Thunderbird \u0026lt; 115.9.(CVE-2024-2616)\n\nAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox \u0026lt; 124.0.1.(CVE-2024-29943)\n\nAn attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox \u0026lt; 124.0.1 and Firefox ESR \u0026lt; 115.9.1.(CVE-2024-29944)\n\nThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3302)\n\nGetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3852)\n\nA use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3853)\n\nIn some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3854)\n\nIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3855)\n\nA use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3856)\n\nThe JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3857)\n\nIt was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3858)\n\nOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3859)\n\nAn out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3860)\n\nIf an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3861)\n\nThe MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3862)\n\nMemory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 125, Firefox ESR \u0026lt; 115.10, and Thunderbird \u0026lt; 115.10.(CVE-2024-3864)\n\nMemory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 125.(CVE-2024-3865)\n\nIn resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.(CVE-2024-43097)\n\nA type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4367)\n\nMultiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4764)\n\nIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4767)\n\nA bug in popup notifications\u0026apos; interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4768)\n\nWhen importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses.  This could have been abused to learn information cross-origin. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4769)\n\nWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4770)\n\nA memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4771)\n\nAn HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4772)\n\nWhen a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4773)\n\nAn iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4775)\n\nA file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4776)\n\nMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 126, Firefox ESR \u0026lt; 115.11, and Thunderbird \u0026lt; 115.11.(CVE-2024-4777)\n\nMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 126.(CVE-2024-4778)\n\nIf a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5688)\n\nBy monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user\u0026apos;s system. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5690)\n\nBy tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5691)\n\nOffscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5693)\n\nBy manipulating the text in an `\u0026amp;lt;input\u0026amp;gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 127, Firefox ESR \u0026lt; 115.12, and Thunderbird \u0026lt; 115.12.(CVE-2024-5696)\n\nA website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox \u0026lt; 127.(CVE-2024-5697)\n\nA race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6601)\n\nA mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6602)\n\nIn an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6603)\n\nMemory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-6604)\n\nFirefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox \u0026lt; 128.(CVE-2024-6605)\n\nClipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6606)\n\nIt was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `\u0026amp;lt;select\u0026amp;gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6607)\n\nIt was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6608)\n\nWhen almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6609)\n\nForm validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6610)\n\nA nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6611)\n\nCSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6612)\n\nThe frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6613)\n\nThe frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6614)\n\nMemory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 128 and Thunderbird \u0026lt; 128.(CVE-2024-6615)\n\nInsufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7519)\n\nIncomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7521)\n\nEditor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7522)\n\nFirefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection.  On a site protected by Content Security Policy in \u0026quot;strict-dynamic\u0026quot; mode, an attacker able to inject an HTML element could have used a DOM Clobbering attack on some of the shims and achieved XSS, bypassing the CSP strict-dynamic protection. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, and Firefox ESR \u0026lt; 128.1.(CVE-2024-7524)\n\nIt was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7525)\n\nANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7526)\n\nUnexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7527)\n\nThe date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, Firefox ESR \u0026lt; 128.1, Thunderbird \u0026lt; 128.1, and Thunderbird \u0026lt; 115.14.(CVE-2024-7529)\n\nCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcome is connection failure, but if the connection persists despite the high packet loss it could be possible for a network observer to identify packets as coming from the same source despite a network path change. This vulnerability affects Firefox \u0026lt; 129, Firefox ESR \u0026lt; 115.14, and Firefox ESR \u0026lt; 128.1.(CVE-2024-7531)\n\nAn error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox \u0026lt; 128, Firefox ESR \u0026lt; 115.13, Thunderbird \u0026lt; 115.13, and Thunderbird \u0026lt; 128.(CVE-2024-7652)\n\nA potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8381)\n\nInternal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools console. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8382)\n\nFirefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing so for the Usenet-related schemes news: and snews:. Since most operating systems don\u0026apos;t have a trusted newsreader installed by default, an unscrupulous program that the user downloaded could register itself as a handler. The website that served the application download could then launch that application at will. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, and Firefox ESR \u0026lt; 115.15.(CVE-2024-8383)\n\nThe JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox \u0026lt; 130, Firefox ESR \u0026lt; 128.2, Firefox ESR \u0026lt; 115.15, Thunderbird \u0026lt; 128.2, and Thunderbird \u0026lt; 115.15.(CVE-2024-8384)\n\nA compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9392)\n\nAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \u0026quot;same site\u0026quot; documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9393)\n\nAn attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \u0026quot;same site\u0026quot; documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9394)\n\nIt is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9396)\n\nA missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9397)\n\nBy checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9398)\n\nA website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9399)\n\nA potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9400)\n\nMemory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Firefox ESR \u0026lt; 115.16, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9401)\n\nMemory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 131, Firefox ESR \u0026lt; 128.3, Thunderbird \u0026lt; 128.3, and Thunderbird \u0026lt; 131.(CVE-2024-9402)\n\nAn attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u0026lt; 131.0.2, Firefox ESR \u0026lt; 128.3.1, Firefox ESR \u0026lt; 115.16.1, Thunderbird \u0026lt; 131.0.1, Thunderbird \u0026lt; 128.3.1, and Thunderbird \u0026lt; 115.16.0.(CVE-2024-9680)\n\nIt was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1931)\n\nAn inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1932)\n\nOn 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1933)\n\nIt was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1934)\n\nA web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1935)\n\njar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1936)\n\nMemory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 115.21, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1937)\n\nMemory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u0026lt; 136, Firefox ESR \u0026lt; 128.8, Thunderbird \u0026lt; 136, and Thunderbird \u0026lt; 128.8.(CVE-2025-1938)","status":"published","published":"2025-03-14T11:08:22Z","modified":"2026-08-18T01:17:49.651062534Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2023-37206","description":"Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox \u003c 115.","status":"published","published":"2023-07-05T10:15:00Z","modified":"2026-04-22T14:08:49.45142Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"openSUSE-SU-2024:13037-1","title":"MozillaFirefox-115.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-115.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:49:13.013406Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14572-1","title":"firefox-esr-128.5.1-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-12T00:00:00Z","modified":"2026-02-04T02:21:21.150439Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2023:2849-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLE","description":"This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:\n\nChanges in MozillaFirefox and MozillaFirefox-branding-SLE:\n\nThis update provides Firefox Extended Support Release 115.0 ESR\n\n* New: \n\n  - Required fields are now highlighted in PDF forms.\n  - Improved performance on high-refresh rate monitors (120Hz+).\n  - Buttons in the Tabs toolbar can now be reached with Tab,\n    Shift+Tab, and Arrow keys. View this article for additional\n    details.\n  - Windows' 'Make text bigger' accessibility setting now\n    affects all the UI and content pages, rather than only\n    applying to system font sizes.\n  - Non-breaking spaces are now preserved—preventing automatic\n    line breaks—when copying text from a form control.\n  - Fixed WebGL performance issues on NVIDIA binary drivers via\n    DMA-Buf on Linux.\n  - Fixed an issue in which Firefox startup could be\n    significantly slowed down by the processing of Web content\n    local storage. This had the greatest impact on users with\n    platter hard drives and significant local storage.\n  - Removed a configuration option to allow SHA-1 signatures in\n    certificates: SHA-1 signatures in certificates—long since\n    determined to no longer be secure enough—are now not\n    supported.\n  - Highlight color is preserved correctly after typing `Enter`\n    in the mail composer of Yahoo Mail and Outlook.\n    After bypassing the https only error page navigating back\n    would take you to the error page that was previously\n    dismissed. Back now takes you to the previous site that was\n    visited.\n  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in\n    plain text contexts, such as input and text area.\n  - Added an option to print only the current page from the\n    print preview dialog.\n  - Swipe to navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) on Windows is now\n    enabled.\n  - Stability on Windows is significantly improved as Firefox\n    handles low-memory situations much better.\n  - Touchpad scrolling on macOS was made more accessible by\n    reducing unintended diagonal scrolling opposite of the\n    intended scroll axis.\n  - Firefox is less likely to run out of memory on Linux and\n    performs more efficiently for the rest of the system when\n    memory runs low.\n  - It is now possible to edit PDFs: including writing text,\n    drawing, and adding signatures.\n  - Setting Firefox as your default browser now also makes it\n    the default PDF application on Windows systems.\n  - Swipe-to-navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) now works for Linux\n    users on Wayland.\n  - Text Recognition in images allows users on macOS 10.15 and\n    higher to extract text from the selected image (such as a\n    meme or screenshot).\n  - Firefox View helps you get back to content you previously\n    discovered. A pinned tab allows you to find and open recently\n    closed tabs on your current device and access tabs from other\n    devices (via our “Tab Pickup” feature).\n  - Import maps, which allow web pages to control the behavior\n    of JavaScript imports, are now enabled by default.\n  - Processes used for background tabs now use efficiency mode\n    on Windows 11 to limit resource use.\n  - The shift+esc keyboard shortcut now opens the Process\n    Manager, offering a way to quickly identify processes that\n    are using too many resources.\n  - Firefox now supports properly color correcting images\n    tagged with ICCv4 profiles.\n  - Support for non-English characters when saving and printing\n    PDF forms.\n  - The bookmarks toolbar's default 'Only show on New Tab'\n    state works correctly for blank new tabs. As before, you can\n    change the bookmark toolbar's behavior using the toolbar\n    context menu.\n  - Manifest Version 3 (MV3) extension support is now enabled\n    by default (MV2 remains enabled/supported). This major update\n    also ushers an exciting user interface change in the form of\n    the new extensions button.\n  - The Arbitrary Code Guard exploit protection has been\n    enabled in the media playback utility processes, improving\n    security for Windows users.\n  - The native HTML date picker for date and datetime inputs\n    can now be used with a keyboard alone, improving its\n    accessibility for screen reader users. Users with limited\n    mobility can also now use common keyboard shortcuts to\n    navigate the calendar grid and month selection spinners.\n  - Firefox builds in the Spanish from Spain (es-ES) and\n    Spanish from Argentina (es-AR) locales now come with a built-\n    in dictionary for the Firefox spellchecker.\n  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls\n    the page instead of zooming. This avoids accidental zooming\n    and matches the behavior of other web browsers on macOS.\n  - It's now possible to import bookmarks, history and\n    passwords not only from Edge, Chrome or Safari but also from\n    Opera, Opera GX, and Vivaldi.\n  - GPU sandboxing has been enabled on Windows.\n  - On Windows, third-party modules can now be blocked from\n    injecting themselves into Firefox, which can be helpful if\n    they are causing crashes or other undesirable behavior.\n  - Date, time, and datetime-local input fields can now be\n    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on\n    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and\n    Linux.\n  - GPU-accelerated Canvas2D is enabled by default on macOS and\n    Linux.\n  - WebGL performance improvement on Windows, MacOS and Linux.\n  - Enables overlay of hardware-decoded video with non-Intel\n    GPUs on Windows 10/11, improving video playback performance\n    and video scaling quality.\n  - Windows native notifications are now enabled.\n  - Firefox Relay users can now opt-in to create Relay email\n    masks directly from the Firefox credential manager. You must\n    be signed in with your Firefox Account.\n  - We’ve added two new locales: Silhe Friulian (fur) and\n    Sardinian (sc).\n  - Right-clicking on password fields now shows an option to\n    reveal the password.\n  - Private windows and ETP set to strict will now include\n    email tracking protection. This will make it harder for email\n    trackers to learn the browsing habits of Firefox users. You\n    can check the Tracking Content in the sub-panel on the shield\n    icon panel.\n  - The deprecated U2F Javascript API is now disabled by\n    default. The U2F protocol remains usable through the WebAuthn\n    API. The U2F API can be re-enabled using the\n    `security.webauth.u2f` preference.\n  - Say hello to enhanced Picture-in-Picture! Rewind, check\n    video duration, and effortlessly switch to full-screen mode\n    on the web's most popular video websites.\n  - Firefox's address bar is already a great place to search\n    for what you're looking for. Now you'll always be able to see\n    your web search terms and refine them while viewing your\n    search's results - no additional scrolling needed! Also, a\n    new result menu has been added making it easier to remove\n    history results and dismiss sponsored Firefox Suggest\n    entries.\n  - Private windows now protect users even better by blocking\n    third-party cookies and storage of content trackers.\n  - Passwords automatically generated by Firefox now include\n    special characters, giving users more secure passwords by\n    default.\n  - Firefox 115 introduces a redesigned accessibility engine\n    which significantly improves the speed, responsiveness, and\n    stability of Firefox when used with:\n\n    - Screen readers, as well as certain other accessibility\n      software;\n    - East Asian input methods;\n    - Enterprise single sign-on software; and\n    - Other applications which use accessibility frameworks to\n      access information.\n\n  - Firefox 115 now supports AV1 Image Format files containing\n    animations (AVIS), improving support for AVIF images across\n    the web.\n  - The Windows GPU sandbox first shipped in the Firefox 110\n    release has been tightened to enhance the security benefits\n    it provides.\n  - A 13-year-old feature request was fulfilled and Firefox now\n    supports files being drag-and-dropped directly from Microsoft\n    Outlook. A special thanks to volunteer contributor Marco\n    Spiess for helping to get this across the finish line!\n  - Users on macOS can now access the Services sub-menu\n    directly from Firefox context menus.\n  - On Windows, the elastic overscroll effect has been enabled\n    by default. When two-finger scrolling on the touchpad or\n    scrolling on the touchscreen, you will now see a bouncing\n    animation when scrolling past the edge of a scroll container.\n  - Firefox is now available in the Tajik (tg) language.\n  - Added UI to manage the DNS over HTTPS exception list.\n  - Bookmarks can now be searched from the Bookmarks menu. The\n    Bookmarks menu is accessible by adding the Bookmarks menu\n    button to the toolbar.\n  - Restrict searches to your local browsing history by\n    selecting Search history from the History, Library or\n    Application menu buttons.\n  - Mac users can now capture video from their cameras in all\n    supported native resolutions. This enables resolutions higher\n    than 1280x720.\n  - It is now possible to reorder the extensions listed in the\n    extensions panel.\n  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /\n    WebAuthn authenticators over USB. Some advanced features,\n    such as fully passwordless logins, require a PIN to be set on\n    the authenticator.\n  - Pocket Recommended content can now be seen in France,\n    Italy, and Spain.\n  - DNS over HTTPS settings are now part of the Privacy \u0026\n    Security section of the Settings page and allow the user to\n    choose from all the supported modes.\n  - Migrating from another browser? Now you can bring over\n    payment methods you've saved in Chrome-based browsers to\n    Firefox.\n  - Hardware video decoding enabled for Intel GPUs on Linux.\n  - The Tab Manager dropdown now features close buttons, so you\n    can close tabs more quickly.\n  - Windows Magnifier now follows the text cursor correctly\n    when the Firefox title bar is visible.\n  - Undo and redo are now available in Password fields.\n    [1]:https://support.mozilla.org/kb/access-toolbar-functions-\n    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3\n    *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w\n    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view\n    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox\n    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/\n    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/\n    [6]:https://support.mozilla.org/kb/unified-extensions\n    [7]:https://support.mozilla.org/kb/import-data-another-browser\n    [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows\n    [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox\n    [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/\n\n* Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438)\n\n  * CVE-2023-3482 (bmo#1839464)\n    Block all cookies bypass for localstorage\n  * CVE-2023-37201 (bmo#1826002)\n    Use-after-free in WebRTC certificate generation\n  * CVE-2023-37202 (bmo#1834711)\n    Potential use-after-free from compartment mismatch in\n    SpiderMonkey\n  * CVE-2023-37203 (bmo#291640)\n    Drag and Drop API may provide access to local system files\n  * CVE-2023-37204 (bmo#1832195)\n    Fullscreen notification obscured via option element\n  * CVE-2023-37205 (bmo#1704420)\n    URL spoofing in address bar using RTL characters\n  * CVE-2023-37206 (bmo#1813299)\n    Insufficient validation of symlinks in the FileSystem API\n  * CVE-2023-37207 (bmo#1816287)\n    Fullscreen notification obscured\n  * CVE-2023-37208 (bmo#1837675)\n    Lack of warning when opening Diagcab files\n  * CVE-2023-37209 (bmo#1837993)\n    Use-after-free in `NotifyOnHistoryReload`\n  * CVE-2023-37210 (bmo#1821886)\n    Full-screen mode exit prevention\n  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,\n    bmo#1836550, bmo#1837450)\n    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,\n    and Thunderbird 102.13\n  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,\n    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,\n    bmo#1838587)\n    Memory safety bugs fixed in Firefox 115\n- Fixed potential SIGILL on older CPUs (bsc#1212101)\n\n* Fixed: Various  security  fixes and other quality\n","status":"published","published":"2023-07-17T07:49:44Z","modified":"2026-02-04T04:12:58.110381Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2850-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLE","description":"This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:\n\nChanges in MozillaFirefox and MozillaFirefox-branding-SLE:\n\nThis update provides Firefox Extended Support Release 115.0 ESR\n\n* New: \n\n  - Required fields are now highlighted in PDF forms.\n  - Improved performance on high-refresh rate monitors (120Hz+).\n  - Buttons in the Tabs toolbar can now be reached with Tab,\n    Shift+Tab, and Arrow keys. View this article for additional\n    details.\n  - Windows' 'Make text bigger' accessibility setting now\n    affects all the UI and content pages, rather than only\n    applying to system font sizes.\n  - Non-breaking spaces are now preserved—preventing automatic\n    line breaks—when copying text from a form control.\n  - Fixed WebGL performance issues on NVIDIA binary drivers via\n    DMA-Buf on Linux.\n  - Fixed an issue in which Firefox startup could be\n    significantly slowed down by the processing of Web content\n    local storage. This had the greatest impact on users with\n    platter hard drives and significant local storage.\n  - Removed a configuration option to allow SHA-1 signatures in\n    certificates: SHA-1 signatures in certificates—long since\n    determined to no longer be secure enough—are now not\n    supported.\n  - Highlight color is preserved correctly after typing `Enter`\n    in the mail composer of Yahoo Mail and Outlook.\n    After bypassing the https only error page navigating back\n    would take you to the error page that was previously\n    dismissed. Back now takes you to the previous site that was\n    visited.\n  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in\n    plain text contexts, such as input and text area.\n  - Added an option to print only the current page from the\n    print preview dialog.\n  - Swipe to navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) on Windows is now\n    enabled.\n  - Stability on Windows is significantly improved as Firefox\n    handles low-memory situations much better.\n  - Touchpad scrolling on macOS was made more accessible by\n    reducing unintended diagonal scrolling opposite of the\n    intended scroll axis.\n  - Firefox is less likely to run out of memory on Linux and\n    performs more efficiently for the rest of the system when\n    memory runs low.\n  - It is now possible to edit PDFs: including writing text,\n    drawing, and adding signatures.\n  - Setting Firefox as your default browser now also makes it\n    the default PDF application on Windows systems.\n  - Swipe-to-navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) now works for Linux\n    users on Wayland.\n  - Text Recognition in images allows users on macOS 10.15 and\n    higher to extract text from the selected image (such as a\n    meme or screenshot).\n  - Firefox View helps you get back to content you previously\n    discovered. A pinned tab allows you to find and open recently\n    closed tabs on your current device and access tabs from other\n    devices (via our “Tab Pickup” feature).\n  - Import maps, which allow web pages to control the behavior\n    of JavaScript imports, are now enabled by default.\n  - Processes used for background tabs now use efficiency mode\n    on Windows 11 to limit resource use.\n  - The shift+esc keyboard shortcut now opens the Process\n    Manager, offering a way to quickly identify processes that\n    are using too many resources.\n  - Firefox now supports properly color correcting images\n    tagged with ICCv4 profiles.\n  - Support for non-English characters when saving and printing\n    PDF forms.\n  - The bookmarks toolbar's default 'Only show on New Tab'\n    state works correctly for blank new tabs. As before, you can\n    change the bookmark toolbar's behavior using the toolbar\n    context menu.\n  - Manifest Version 3 (MV3) extension support is now enabled\n    by default (MV2 remains enabled/supported). This major update\n    also ushers an exciting user interface change in the form of\n    the new extensions button.\n  - The Arbitrary Code Guard exploit protection has been\n    enabled in the media playback utility processes, improving\n    security for Windows users.\n  - The native HTML date picker for date and datetime inputs\n    can now be used with a keyboard alone, improving its\n    accessibility for screen reader users. Users with limited\n    mobility can also now use common keyboard shortcuts to\n    navigate the calendar grid and month selection spinners.\n  - Firefox builds in the Spanish from Spain (es-ES) and\n    Spanish from Argentina (es-AR) locales now come with a built-\n    in dictionary for the Firefox spellchecker.\n  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls\n    the page instead of zooming. This avoids accidental zooming\n    and matches the behavior of other web browsers on macOS.\n  - It's now possible to import bookmarks, history and\n    passwords not only from Edge, Chrome or Safari but also from\n    Opera, Opera GX, and Vivaldi.\n  - GPU sandboxing has been enabled on Windows.\n  - On Windows, third-party modules can now be blocked from\n    injecting themselves into Firefox, which can be helpful if\n    they are causing crashes or other undesirable behavior.\n  - Date, time, and datetime-local input fields can now be\n    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on\n    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and\n    Linux.\n  - GPU-accelerated Canvas2D is enabled by default on macOS and\n    Linux.\n  - WebGL performance improvement on Windows, MacOS and Linux.\n  - Enables overlay of hardware-decoded video with non-Intel\n    GPUs on Windows 10/11, improving video playback performance\n    and video scaling quality.\n  - Windows native notifications are now enabled.\n  - Firefox Relay users can now opt-in to create Relay email\n    masks directly from the Firefox credential manager. You must\n    be signed in with your Firefox Account.\n  - We’ve added two new locales: Silhe Friulian (fur) and\n    Sardinian (sc).\n  - Right-clicking on password fields now shows an option to\n    reveal the password.\n  - Private windows and ETP set to strict will now include\n    email tracking protection. This will make it harder for email\n    trackers to learn the browsing habits of Firefox users. You\n    can check the Tracking Content in the sub-panel on the shield\n    icon panel.\n  - The deprecated U2F Javascript API is now disabled by\n    default. The U2F protocol remains usable through the WebAuthn\n    API. The U2F API can be re-enabled using the\n    `security.webauth.u2f` preference.\n  - Say hello to enhanced Picture-in-Picture! Rewind, check\n    video duration, and effortlessly switch to full-screen mode\n    on the web's most popular video websites.\n  - Firefox's address bar is already a great place to search\n    for what you're looking for. Now you'll always be able to see\n    your web search terms and refine them while viewing your\n    search's results - no additional scrolling needed! Also, a\n    new result menu has been added making it easier to remove\n    history results and dismiss sponsored Firefox Suggest\n    entries.\n  - Private windows now protect users even better by blocking\n    third-party cookies and storage of content trackers.\n  - Passwords automatically generated by Firefox now include\n    special characters, giving users more secure passwords by\n    default.\n  - Firefox 115 introduces a redesigned accessibility engine\n    which significantly improves the speed, responsiveness, and\n    stability of Firefox when used with:\n\n    - Screen readers, as well as certain other accessibility\n      software;\n    - East Asian input methods;\n    - Enterprise single sign-on software; and\n    - Other applications which use accessibility frameworks to\n      access information.\n\n  - Firefox 115 now supports AV1 Image Format files containing\n    animations (AVIS), improving support for AVIF images across\n    the web.\n  - The Windows GPU sandbox first shipped in the Firefox 110\n    release has been tightened to enhance the security benefits\n    it provides.\n  - A 13-year-old feature request was fulfilled and Firefox now\n    supports files being drag-and-dropped directly from Microsoft\n    Outlook. A special thanks to volunteer contributor Marco\n    Spiess for helping to get this across the finish line!\n  - Users on macOS can now access the Services sub-menu\n    directly from Firefox context menus.\n  - On Windows, the elastic overscroll effect has been enabled\n    by default. When two-finger scrolling on the touchpad or\n    scrolling on the touchscreen, you will now see a bouncing\n    animation when scrolling past the edge of a scroll container.\n  - Firefox is now available in the Tajik (tg) language.\n  - Added UI to manage the DNS over HTTPS exception list.\n  - Bookmarks can now be searched from the Bookmarks menu. The\n    Bookmarks menu is accessible by adding the Bookmarks menu\n    button to the toolbar.\n  - Restrict searches to your local browsing history by\n    selecting Search history from the History, Library or\n    Application menu buttons.\n  - Mac users can now capture video from their cameras in all\n    supported native resolutions. This enables resolutions higher\n    than 1280x720.\n  - It is now possible to reorder the extensions listed in the\n    extensions panel.\n  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /\n    WebAuthn authenticators over USB. Some advanced features,\n    such as fully passwordless logins, require a PIN to be set on\n    the authenticator.\n  - Pocket Recommended content can now be seen in France,\n    Italy, and Spain.\n  - DNS over HTTPS settings are now part of the Privacy \u0026\n    Security section of the Settings page and allow the user to\n    choose from all the supported modes.\n  - Migrating from another browser? Now you can bring over\n    payment methods you've saved in Chrome-based browsers to\n    Firefox.\n  - Hardware video decoding enabled for Intel GPUs on Linux.\n  - The Tab Manager dropdown now features close buttons, so you\n    can close tabs more quickly.\n  - Windows Magnifier now follows the text cursor correctly\n    when the Firefox title bar is visible.\n  - Undo and redo are now available in Password fields.\n    [1]:https://support.mozilla.org/kb/access-toolbar-functions-\n    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3\n    *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w\n    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view\n    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox\n    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/\n    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/\n    [6]:https://support.mozilla.org/kb/unified-extensions\n    [7]:https://support.mozilla.org/kb/import-data-another-browser\n    [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows\n    [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox\n    [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/\n\n* Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438)\n\n  * CVE-2023-3482 (bmo#1839464)\n    Block all cookies bypass for localstorage\n  * CVE-2023-37201 (bmo#1826002)\n    Use-after-free in WebRTC certificate generation\n  * CVE-2023-37202 (bmo#1834711)\n    Potential use-after-free from compartment mismatch in\n    SpiderMonkey\n  * CVE-2023-37203 (bmo#291640)\n    Drag and Drop API may provide access to local system files\n  * CVE-2023-37204 (bmo#1832195)\n    Fullscreen notification obscured via option element\n  * CVE-2023-37205 (bmo#1704420)\n    URL spoofing in address bar using RTL characters\n  * CVE-2023-37206 (bmo#1813299)\n    Insufficient validation of symlinks in the FileSystem API\n  * CVE-2023-37207 (bmo#1816287)\n    Fullscreen notification obscured\n  * CVE-2023-37208 (bmo#1837675)\n    Lack of warning when opening Diagcab files\n  * CVE-2023-37209 (bmo#1837993)\n    Use-after-free in `NotifyOnHistoryReload`\n  * CVE-2023-37210 (bmo#1821886)\n    Full-screen mode exit prevention\n  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,\n    bmo#1836550, bmo#1837450)\n    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,\n    and Thunderbird 102.13\n  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,\n    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,\n    bmo#1838587)\n    Memory safety bugs fixed in Firefox 115\n- Fixed potential SIGILL on older CPUs (bsc#1212101)\n\n* Fixed: Various  security  fixes and other quality\n","status":"published","published":"2023-07-17T07:52:51Z","modified":"2026-02-04T02:23:42.944567Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2886-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLE","description":"This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:\n\nChanges in MozillaFirefox and MozillaFirefox-branding-SLE:\n\nThis update provides Firefox Extended Support Release 115.0 ESR\n\n* New: \n\n  - Required fields are now highlighted in PDF forms.\n  - Improved performance on high-refresh rate monitors (120Hz+).\n  - Buttons in the Tabs toolbar can now be reached with Tab,\n    Shift+Tab, and Arrow keys. View this article for additional\n    details.\n  - Windows' 'Make text bigger' accessibility setting now\n    affects all the UI and content pages, rather than only\n    applying to system font sizes.\n  - Non-breaking spaces are now preserved—preventing automatic\n    line breaks—when copying text from a form control.\n  - Fixed WebGL performance issues on NVIDIA binary drivers via\n    DMA-Buf on Linux.\n  - Fixed an issue in which Firefox startup could be\n    significantly slowed down by the processing of Web content\n    local storage. This had the greatest impact on users with\n    platter hard drives and significant local storage.\n  - Removed a configuration option to allow SHA-1 signatures in\n    certificates: SHA-1 signatures in certificates—long since\n    determined to no longer be secure enough—are now not\n    supported.\n  - Highlight color is preserved correctly after typing `Enter`\n    in the mail composer of Yahoo Mail and Outlook.\n    After bypassing the https only error page navigating back\n    would take you to the error page that was previously\n    dismissed. Back now takes you to the previous site that was\n    visited.\n  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in\n    plain text contexts, such as input and text area.\n  - Added an option to print only the current page from the\n    print preview dialog.\n  - Swipe to navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) on Windows is now\n    enabled.\n  - Stability on Windows is significantly improved as Firefox\n    handles low-memory situations much better.\n  - Touchpad scrolling on macOS was made more accessible by\n    reducing unintended diagonal scrolling opposite of the\n    intended scroll axis.\n  - Firefox is less likely to run out of memory on Linux and\n    performs more efficiently for the rest of the system when\n    memory runs low.\n  - It is now possible to edit PDFs: including writing text,\n    drawing, and adding signatures.\n  - Setting Firefox as your default browser now also makes it\n    the default PDF application on Windows systems.\n  - Swipe-to-navigate (two fingers on a touchpad swiped left or\n    right to perform history back or forward) now works for Linux\n    users on Wayland.\n  - Text Recognition in images allows users on macOS 10.15 and\n    higher to extract text from the selected image (such as a\n    meme or screenshot).\n  - Firefox View helps you get back to content you previously\n    discovered. A pinned tab allows you to find and open recently\n    closed tabs on your current device and access tabs from other\n    devices (via our “Tab Pickup” feature).\n  - Import maps, which allow web pages to control the behavior\n    of JavaScript imports, are now enabled by default.\n  - Processes used for background tabs now use efficiency mode\n    on Windows 11 to limit resource use.\n  - The shift+esc keyboard shortcut now opens the Process\n    Manager, offering a way to quickly identify processes that\n    are using too many resources.\n  - Firefox now supports properly color correcting images\n    tagged with ICCv4 profiles.\n  - Support for non-English characters when saving and printing\n    PDF forms.\n  - The bookmarks toolbar's default 'Only show on New Tab'\n    state works correctly for blank new tabs. As before, you can\n    change the bookmark toolbar's behavior using the toolbar\n    context menu.\n  - Manifest Version 3 (MV3) extension support is now enabled\n    by default (MV2 remains enabled/supported). This major update\n    also ushers an exciting user interface change in the form of\n    the new extensions button.\n  - The Arbitrary Code Guard exploit protection has been\n    enabled in the media playback utility processes, improving\n    security for Windows users.\n  - The native HTML date picker for date and datetime inputs\n    can now be used with a keyboard alone, improving its\n    accessibility for screen reader users. Users with limited\n    mobility can also now use common keyboard shortcuts to\n    navigate the calendar grid and month selection spinners.\n  - Firefox builds in the Spanish from Spain (es-ES) and\n    Spanish from Argentina (es-AR) locales now come with a built-\n    in dictionary for the Firefox spellchecker.\n  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls\n    the page instead of zooming. This avoids accidental zooming\n    and matches the behavior of other web browsers on macOS.\n  - It's now possible to import bookmarks, history and\n    passwords not only from Edge, Chrome or Safari but also from\n    Opera, Opera GX, and Vivaldi.\n  - GPU sandboxing has been enabled on Windows.\n  - On Windows, third-party modules can now be blocked from\n    injecting themselves into Firefox, which can be helpful if\n    they are causing crashes or other undesirable behavior.\n  - Date, time, and datetime-local input fields can now be\n    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on\n    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and\n    Linux.\n  - GPU-accelerated Canvas2D is enabled by default on macOS and\n    Linux.\n  - WebGL performance improvement on Windows, MacOS and Linux.\n  - Enables overlay of hardware-decoded video with non-Intel\n    GPUs on Windows 10/11, improving video playback performance\n    and video scaling quality.\n  - Windows native notifications are now enabled.\n  - Firefox Relay users can now opt-in to create Relay email\n    masks directly from the Firefox credential manager. You must\n    be signed in with your Firefox Account.\n  - We’ve added two new locales: Silhe Friulian (fur) and\n    Sardinian (sc).\n  - Right-clicking on password fields now shows an option to\n    reveal the password.\n  - Private windows and ETP set to strict will now include\n    email tracking protection. This will make it harder for email\n    trackers to learn the browsing habits of Firefox users. You\n    can check the Tracking Content in the sub-panel on the shield\n    icon panel.\n  - The deprecated U2F Javascript API is now disabled by\n    default. The U2F protocol remains usable through the WebAuthn\n    API. The U2F API can be re-enabled using the\n    `security.webauth.u2f` preference.\n  - Say hello to enhanced Picture-in-Picture! Rewind, check\n    video duration, and effortlessly switch to full-screen mode\n    on the web's most popular video websites.\n  - Firefox's address bar is already a great place to search\n    for what you're looking for. Now you'll always be able to see\n    your web search terms and refine them while viewing your\n    search's results - no additional scrolling needed! Also, a\n    new result menu has been added making it easier to remove\n    history results and dismiss sponsored Firefox Suggest\n    entries.\n  - Private windows now protect users even better by blocking\n    third-party cookies and storage of content trackers.\n  - Passwords automatically generated by Firefox now include\n    special characters, giving users more secure passwords by\n    default.\n  - Firefox 115 introduces a redesigned accessibility engine\n    which significantly improves the speed, responsiveness, and\n    stability of Firefox when used with:\n\n    - Screen readers, as well as certain other accessibility\n      software;\n    - East Asian input methods;\n    - Enterprise single sign-on software; and\n    - Other applications which use accessibility frameworks to\n      access information.\n\n  - Firefox 115 now supports AV1 Image Format files containing\n    animations (AVIS), improving support for AVIF images across\n    the web.\n  - The Windows GPU sandbox first shipped in the Firefox 110\n    release has been tightened to enhance the security benefits\n    it provides.\n  - A 13-year-old feature request was fulfilled and Firefox now\n    supports files being drag-and-dropped directly from Microsoft\n    Outlook. A special thanks to volunteer contributor Marco\n    Spiess for helping to get this across the finish line!\n  - Users on macOS can now access the Services sub-menu\n    directly from Firefox context menus.\n  - On Windows, the elastic overscroll effect has been enabled\n    by default. When two-finger scrolling on the touchpad or\n    scrolling on the touchscreen, you will now see a bouncing\n    animation when scrolling past the edge of a scroll container.\n  - Firefox is now available in the Tajik (tg) language.\n  - Added UI to manage the DNS over HTTPS exception list.\n  - Bookmarks can now be searched from the Bookmarks menu. The\n    Bookmarks menu is accessible by adding the Bookmarks menu\n    button to the toolbar.\n  - Restrict searches to your local browsing history by\n    selecting Search history from the History, Library or\n    Application menu buttons.\n  - Mac users can now capture video from their cameras in all\n    supported native resolutions. This enables resolutions higher\n    than 1280x720.\n  - It is now possible to reorder the extensions listed in the\n    extensions panel.\n  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /\n    WebAuthn authenticators over USB. Some advanced features,\n    such as fully passwordless logins, require a PIN to be set on\n    the authenticator.\n  - Pocket Recommended content can now be seen in France,\n    Italy, and Spain.\n  - DNS over HTTPS settings are now part of the Privacy \u0026\n    Security section of the Settings page and allow the user to\n    choose from all the supported modes.\n  - Migrating from another browser? Now you can bring over\n    payment methods you've saved in Chrome-based browsers to\n    Firefox.\n  - Hardware video decoding enabled for Intel GPUs on Linux.\n  - The Tab Manager dropdown now features close buttons, so you\n    can close tabs more quickly.\n  - Windows Magnifier now follows the text cursor correctly\n    when the Firefox title bar is visible.\n  - Undo and redo are now available in Password fields.\n    [1]:https://support.mozilla.org/kb/access-toolbar-functions-\n    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3\n    *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w\n    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view\n    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox\n    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/\n    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/\n    [6]:https://support.mozilla.org/kb/unified-extensions\n    [7]:https://support.mozilla.org/kb/import-data-another-browser\n    [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows\n    [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox\n    [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/\n\n* Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438)\n\n  * CVE-2023-3482 (bmo#1839464)\n    Block all cookies bypass for localstorage\n  * CVE-2023-37201 (bmo#1826002)\n    Use-after-free in WebRTC certificate generation\n  * CVE-2023-37202 (bmo#1834711)\n    Potential use-after-free from compartment mismatch in\n    SpiderMonkey\n  * CVE-2023-37203 (bmo#291640)\n    Drag and Drop API may provide access to local system files\n  * CVE-2023-37204 (bmo#1832195)\n    Fullscreen notification obscured via option element\n  * CVE-2023-37205 (bmo#1704420)\n    URL spoofing in address bar using RTL characters\n  * CVE-2023-37206 (bmo#1813299)\n    Insufficient validation of symlinks in the FileSystem API\n  * CVE-2023-37207 (bmo#1816287)\n    Fullscreen notification obscured\n  * CVE-2023-37208 (bmo#1837675)\n    Lack of warning when opening Diagcab files\n  * CVE-2023-37209 (bmo#1837993)\n    Use-after-free in `NotifyOnHistoryReload`\n  * CVE-2023-37210 (bmo#1821886)\n    Full-screen mode exit prevention\n  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,\n    bmo#1836550, bmo#1837450)\n    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,\n    and Thunderbird 102.13\n  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,\n    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,\n    bmo#1838587)\n    Memory safety bugs fixed in Firefox 115\n- Fixed potential SIGILL on older CPUs (bsc#1212101)\n\n* Fixed: Various security fixes and other quality\n","status":"published","published":"2023-07-19T15:50:50Z","modified":"2026-02-04T03:17:15.676544Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6201-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked into opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, obtain sensitive\ninformation across domains, or execute arbitrary code. (CVE-2023-37201,\nCVE-2023-37202, CVE-2023-37205, CVE-2023-37207, CVE-2023-37209,\nCVE-2023-37210, CVE-2023-37211, CVE-2023-37212)\n\nMartin Hostettler discovered that Firefox did not properly block storage of\nall cookies when configured. An attacker could potentially exploits this\nissue to store tracking data without permission in localstorage.\n(CVE-2023-3482)\n\nPaul Nickerson discovered that Firefox did have insufficient validation in\nthe Drag and Drop API. If a user were tricked into creating a shortcut to\nlocal system files, an attacker could execute arbitrary code.\n(CVE-2023-37203)\n\nIrvan Kurniawan discovered that Firefox did not properly manage fullscreen\nnotifications using an option element having an expensive computational\nfunction. An attacker could potentially exploit this issue to perform\nspoofing attacks. (CVE-2023-37204)\n\nAmeen Basha M K discovered that Firefox did not properly validate symlinks\nin the FileSystem API. If a user were tricked into uploading a symlinked\nfile to a malicious website, an attacker could obtain sensitive information.\n(CVE-2023-37206)\n\nPuf discovered that Firefox did not properly provide warning when opening\nDiagcab files. If a user were tricked into opening a malicicous Diagcab\nfile, an attacker could execute arbitrary code. (CVE-2023-37208)\n","status":"published","published":"2023-07-05T09:23:05Z","modified":"2026-04-22T10:37:01.486993Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}